IR-4(6)

Requirement

Implement an incident handling capability for incidents involving insider threats.

Discussion

Explicit focus on handling incidents involving insider threats provides additional emphasis on this type of threat and the need for specific incident handling capabilities to provide appropriate and timely responses.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident handling; mechanisms supporting incident handling; system design documentation; system configuration settings and associated documentation; incident response plan; system security plan; audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident handling responsibilities; organizational personnel with information security responsibilities].

ID	Assessment Objectives
IR-04(06)	an incident handling capability is implemented for incidents involving insider threats.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!