Incident Response (IR)
Establish and maintain a security operations center.
Incident Response (IR)
(a) Manage public relations associated with an incident; and (b) Employ measures to repair the reputation of the organization.
Incident Response (IR)
Level N/A
Track and document incidents.
Incident Response (IR)
Track incidents and collect and analyze incident information using [Assignment: organization-defined automated mechanisms].
Incident Response (IR)
Level N/A
a. Require personnel to report suspected incidents to the organizational incident response capability within [Assignment: organization-defined time period]; and b. Report incident information to [Assignment: organization-defined authorities].
Incident Response (IR)
Level N/A
Report incidents using [Assignment: organization-defined automated mechanisms].
Incident Response (IR)
Report system vulnerabilities associated with reported incidents to [Assignment: organization-defined personnel or roles].
Incident Response (IR)
Provide incident information to the provider of the product or service and other organizations involved in the supply chain or supply chain governance for systems or system components related to the incident.
Incident Response (IR)
Level N/A
Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.
Incident Response (IR)
Level N/A
Increase the availability of incident response information and support using [Assignment: organization-defined automated mechanisms].
