IR-4(1)

Requirement

Support the incident handling process using [Assignment: organization-defined automated mechanisms].

Discussion

Automated mechanisms that support incident handling processes include online incident management systems and tools that support the collection of live response data, full network packet capture, and forensic analysis.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident handling; automated mechanisms supporting incident handling; system design documentation; system configuration settings and associated documentation; system audit records; incident response plan; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident handling responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Automated mechanisms that support and/or implement the incident handling process].

ID	Assessment Objectives
IR-04(01)	the incident handling process is supported using <IR-04(01)_ODP automated mechanisms>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!