IR-3(2)

Requirement

Coordinate incident response testing with organizational elements responsible for related plans.

Discussion

Organizational plans related to incident response testing include business continuity plans, disaster recovery plans, continuity of operations plans, contingency plans, crisis communications plans, critical infrastructure plans, and occupant emergency plans.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; contingency planning policy; procedures addressing incident response testing; incident response testing documentation; incident response plan; business continuity plans; contingency plans; disaster recovery plans; continuity of operations plans; crisis communications plans; critical infrastructure plans; occupant emergency plans; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident response testing responsibilities; organizational personnel with responsibilities for testing organizational plans related to incident response testing; organizational personnel with information security and privacy responsibilities].

ID	Assessment Objectives
IR-03(02)	incident response testing is coordinated with organizational elements responsible for related plans.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!