IR-4(15)

Requirement
1. Manage public relations associated with an incident; and
2. Employ measures to repair the reputation of the organization.

Discussion

It is important for an organization to have a strategy in place for addressing incidents that have been brought to the attention of the general public, have cast the organization in a negative light, or have affected the organization's constituents (e.g., partners, customers). Such publicity can be extremely harmful to the organization and affect its ability to carry out its mission and business functions. Taking proactive steps to repair the organization's reputation is an essential aspect of reestablishing the trust and confidence of its constituents.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident response; procedures addressing incident handling; incident response plan; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident handling responsibilities; organizational personnel with information security responsibilities; organizational personnel with communications or public relations responsibilities].

ID	Assessment Objectives
IR-04(15)(b)	measures are employed to repair the reputation of the organization.
IR-04(15)(a)	public relations associated with an incident are managed;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!