An error occurred:

CCIs

Number Definition Status Related
CCI-004142 Defines the organizational entities for coordinating an incident handling capability for insider threats. Draft IR-4(7)
CCI-004143 Establish and maintain an integrated incident response team that can be deployed to any location identified by the organization in an organization-defined time period. Draft IR-4(11)
CCI-004144 Defines the time period for establishing and maintaining an integrated incident response team that can be deployed to any location identified by the organization. Draft IR-4(11)
CCI-004145 Analyze malicious code and/or other residual artifacts remaining in the system after the incident. Draft IR-4(12)
CCI-004146 Analyze anomalous or suspected adversarial behavior in or related to organization-defined environments or resources. Draft IR-4(13)
CCI-004147 Defines the environments or resources for analyzing anomalous or suspected adversarial behavior. Draft IR-4(13)
CCI-004148 Establish and maintain a security operations center. Draft IR-4(14)
CCI-004149 Manage public relations associated with an incident. Draft IR-4(15)
CCI-004150 Employ measures to repair the reputation of the organization. Draft IR-4(15)
CCI-004151 Track incidents using organization-defined automated mechanisms. Draft IR-5(1)
CCI-004152 Collect incident information using organization-defined automated mechanisms. Draft IR-5(1)
CCI-004153 Analyze incident information using organization-defined automated mechanisms. Draft IR-5(1)
CCI-004154 Defines the automated mechanisms to track, collect, and analyze incident information. Draft IR-5(1)
CCI-004155 Defines the automated mechanisms for reporting incidents. Draft IR-6(1)
CCI-004156 Provide incident information to the provider of the product or service. Draft IR-6(3)
CCI-004157 Develop an incident response plan that addresses the sharing of incident information. Draft IR-8
CCI-004158 Defines the frequency organization-defined personnel or roles will review and approve the incident response plan. Draft IR-8
CCI-004159 Develop an incident response plan that explicitly designates responsibility for incident response to organization-defined entities, personnel, or roles. Draft IR-8
CCI-004160 Include a process to determine if notice to individuals or other organizations, including oversight organizations, is needed, in the Incident Response Plan for breaches involving Personally Identifiable Information. Draft IR-8(1)
CCI-004161 Include an assessment process to determine the extent of the harm, embarrassment, inconvenience, or unfairness to affected individuals and any mechanisms to mitigate such harms in the Incident Response Plan for breaches involving Personally Identifiable Information. Draft IR-8(1)
CCI-004162 Include identification of applicable privacy requirements in the Incident Response Plan for breaches involving Personally Identifiable Information. Draft IR-8(1)
CCI-004163 Respond to information spills by assigning organization-defined personnel or roles with responsibility for responding to information spills. Draft IR-9
CCI-004164 Defines the personnel or roles who will respond to information spills. Draft IR-9
CCI-004165 Develop and document an organization-level; mission/business process-level; and/or system-level maintenance policy that is consistent with applicable laws, Executive Orders, directives, regulations, policies, standards, and guidelines. Draft MA-1
CCI-004166 Designate an organization-defined official to manage the development, documentation, and dissemination of the maintenance policy. Draft MA-1
CCI-004167 Designate an organization-defined official to manage the development, documentation, and dissemination of the maintenance procedures. Draft MA-1
CCI-004168 Defines the official who will manage the development, documentation, and dissemination of the maintenance policy. Draft MA-1
CCI-004169 Defines the official who will manage the development, documentation, and dissemination of the maintenance procedures. Draft MA-1
CCI-004170 Review and update the current maintenance policy following organization-defined events. Draft MA-1
CCI-004171 Defines the events following reviewing and updating the current maintenance policy. Draft MA-1