IR-2(1)

Requirement

Incorporate simulated events into incident response training to facilitate the required response by personnel in crisis situations.

Discussion

Organizations establish requirements for responding to incidents in incident response plans. Incorporating simulated events into incident response training helps to ensure that personnel understand their individual responsibilities and what specific actions to take in crisis situations.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident response training; incident response training curriculum; incident response training materials; incident response plan; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident response training and operational responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Mechanisms that support and/or implement simulated events for incident response training].

ID	Assessment Objectives
IR-02(01)	simulated events are incorporated into incident response training to facilitate the required response by personnel in crisis situations.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!