Navigate

IR-3 (1)

IR-3 (1): Automated Testing

The organization employs automated mechanisms to more thoroughly and effectively test the incident response capability.

Supplemental

Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities, for example: (i) by providing more complete coverage of incident response issues; (ii) by selecting more realistic test scenarios and test environments; and (iii) by stressing the response capability.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to IR-3 (1).

Control	Description
AT-2	The organization provides basic security awareness training to information system users (including managers, senior executives, and contractors): AT-2a.: As part of initial training for new users; AT-2b.: When required by information system changes; and AT-2c.: [Assignment: organization-defined frequency] thereafter.

Enhancements

The controls below (if any) add on to the requirements of IR-3 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to IR-3 (1).

CCI	Definition
CCI-000821	The organization employs automated mechanisms to more thoroughly and effectively test the incident response capability.