IR-4(9)

Requirement

Employ [Assignment: organization-defined dynamic response capabilities] to respond to incidents.

Discussion

The dynamic response capability addresses the timely deployment of new or replacement organizational capabilities in response to incidents. This includes capabilities implemented at the mission and business process level and at the system level.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident handling; automated mechanisms supporting dynamic response capabilities; system design documentation; system configuration settings and associated documentation; incident response plan; system security plan; audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident handling responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for dynamic response capability; automated mechanisms supporting and/or implementing the dynamic response capability for the organization].

ID	Assessment Objectives
IR-04(09)	<IR-04(09)_ODP dynamic response capabilities> are employed to respond to incidents.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!