An error occurred:

CCIs

Number Definition Status Related
CCI-000811 Review and update the current incident response procedures in accordance with organization-defined frequency. Draft IR-1
CCI-000812 Defines the frequency with which to review and update the current incident response procedures. Draft IR-1
CCI-000813 Provide incident response training to system users consistent with assigned roles and responsibilities within an organization-defined time period of assuming an incident response role or responsibility. Draft IR-2
CCI-000814 Provide incident response training in accordance with organization-defined frequency. Draft IR-2
CCI-000815 Defines a frequency for incident response training. Draft IR-2
CCI-000816 Incorporate simulated events into incident response training to facilitate effective response by personnel in crisis situations. Draft IR-2(1)
CCI-000817 Provide an incident response training environment using organization-defined automated mechanisms. Draft IR-2(2)
CCI-000818 Test the effectiveness of the incident response capability for the system on an organization-defined frequency using organization-defined tests. Draft IR-3
CCI-000819 Defines a frequency for incident response tests. Draft IR-3
CCI-000820 Defines tests for incident response. Draft IR-3
CCI-000821 Test the incident response capability using organization-defined automated mechanisms. Draft IR-3(1)
CCI-000822 Implement an incident handling capability for incidents that is consistent with the incident response plan and includes preparation, detection and analysis, containment, eradication, and recovery. Draft IR-4
CCI-000823 Coordinate incident handling activities with contingency planning activities. Draft IR-4
CCI-000824 The organization incorporates lessons learned from ongoing incident handling activities into incident response procedures, training, and testing/exercises. Draft IR-4
CCI-000825 Support the incident handling process using organization-defined automated mechanisms. Draft IR-4(1)
CCI-000826 Include organization-defined types of dynamic reconfiguration for organization-defined system components as part of the incident response capability. Draft IR-4(2)
CCI-000827 Identify organization-defined classes of incidents for which organization-defined actions are to be taken to ensure continuation of organizational mission and business functions. Draft IR-4(3)
CCI-000828 Identify actions to take in response to organization-defined classes of incidents to ensure continuation of organizational missions and business functions. Draft IR-4(3)
CCI-000829 Correlate incident information and individual incident responses to achieve an organization-wide perspective on incident awareness and response. Draft IR-4(4)
CCI-000830 Defines security violations that, if detected, initiate a configurable capability to automatically disable the system. Draft IR-4(5)
CCI-000831 Implement a configurable capability to automatically disable the system if organization-defined security violations are detected. Draft IR-4(5)
CCI-000832 Track and document incidents. Draft IR-5
CCI-000833 The organization employs automated mechanisms to assist in the tracking of security incidents. Draft IR-5(1)
CCI-000834 Defines a time period for personnel to report suspected incidents to the organizational incident response capability. Draft IR-6
CCI-000835 Require personnel to report suspected incidents to the organizational incident response capability within the organization-defined time period. Draft IR-6
CCI-000836 Report incident information to organization-defined authorities. Draft IR-6
CCI-000837 Report incidents using organization-defined automated mechanisms. Draft IR-6(1)
CCI-000838 Report system vulnerabilities associated with reported incidents to organization-defined personnel or roles. Draft IR-6(2)
CCI-000839 Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents. Draft IR-7
CCI-000840 The organization employs automated mechanisms to increase the availability of incident response-related information and support. Draft IR-7(1)