An error occurred:

CCIs

Number Definition Status Related
CCI-002791 Defines authorities to whom incident information is reported. Draft IR-6
CCI-002792 Defines personnel or roles to whom system vulnerabilities associated with reported incident information are reported. Draft IR-6(2)
CCI-002793 Provide incident information to other organizations involved in the supply chain or supply chain governance for systems or system components related to the incident. Draft IR-6(3)
CCI-002794 Develop an incident response plan. Draft IR-8
CCI-002795 Develop an incident response plan that provides the organization with a roadmap for implementing its incident response capability. Draft IR-8
CCI-002796 Develop an incident response plan that describes the structure and organization of the incident response capability. Draft IR-8
CCI-002797 Develop an incident response plan that provides a high-level approach for how the incident response capability fits into the overall organization. Draft IR-8
CCI-002798 Develop an incident response plan that meets the unique requirements of the organization, which relate to mission, size, structure, and functions. Draft IR-8
CCI-002799 Develop an incident response plan that defines reportable incidents. Draft IR-8
CCI-002800 Develop an incident response plan that provides metrics for measuring the incident response capability within the organization. Draft IR-8
CCI-002801 Develop an incident response plan that defines the resources and management support needed to effectively maintain and mature an incident response capability. Draft IR-8
CCI-002802 Defines personnel or roles to review and approve the incident response plan. Draft IR-8
CCI-002803 Defines incident response personnel (identified by name and/or by role) and organizational elements to whom incident response plan changes will be communicated. Draft IR-8
CCI-002804 Protect the incident response plan from unauthorized disclosure and modification. Draft IR-8
CCI-002805 Respond to information spills by identifying the specific information involved in the system contamination. Draft IR-9
CCI-002806 Respond to information spills by alerting organization-defined personnel or roles of the information spill using a method of communication not associated with the spill. Draft IR-9
CCI-002807 Defines the personnel or roles to be alerted of information spills using a method of communication not associated with the spill. Draft IR-9
CCI-002808 Respond to information spills by isolating the contaminated system or system component. Draft IR-9
CCI-002809 Respond to information spills by eradicating the information from the contaminated system or component. Draft IR-9
CCI-002810 Respond to information spills by identifying other systems or system components that may have been subsequently contaminated. Draft IR-9
CCI-002811 Respond to information spills by performing additional organization-defined actions. Draft IR-9
CCI-002812 Defines additional actions required to respond to information spills. Draft IR-9
CCI-002813 The organization assigns organization-defined personnel or roles with responsibility for responding to information spills. Draft IR-9(1)
CCI-002814 The organization assigns organization-defined personnel or roles with responsibility for responding to information spills. Deprecated IR-9(1)
CCI-002815 The organization defines personnel or roles to whom responsibility for responding to information spills will be assigned. Draft IR-9(1)
CCI-002816 Provide information spillage response training according to an organization-defined frequency. Draft IR-9(2)
CCI-002817 Defines the frequency with which to provide information spillage response training. Draft IR-9(2)
CCI-002818 Implement organization-defined procedures to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions. Draft IR-9(3)
CCI-002819 Defines the procedures to be implemented to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions. Draft IR-9(3)
CCI-002820 Employ organization-defined controls for personnel exposed to information not within assigned access authorizations. Draft IR-9(4)