IR-9(3)

Requirement

Implement the following procedures to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions: [Assignment: organization-defined procedures].

Discussion

Corrective actions for systems contaminated due to information spillages may be time-consuming. Personnel may not have access to the contaminated systems while corrective actions are being taken, which may potentially affect their ability to conduct organizational business.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident response; procedures addressing information spillage; incident response plan; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident response responsibilities; organizational personnel with information security responsibilities].

ID	Assessment Objectives
IR-09(03)	<IR-09(03)_ODP procedures> are implemented to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!