IR-7

Requirement

Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.

Discussion

Incident response support resources provided by organizations include help desks, assistance groups, automated ticketing systems to open and track incident response tickets, and access to forensics services or consumer redress services, when required.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident response assistance; incident response plan; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident response assistance and support responsibilities; organizational personnel with access to incident response support and assistance capability; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for incident response assistance; mechanisms supporting and/or implementing incident response assistance].

ID	Assessment Objectives
IR-07[01]	an incident response support resource, integral to the organizational incident response capability, is provided;
IR-07[02]	the incident response support resource offers advice and assistance to users of the system for the response and reporting of incidents.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!