|
controlIR-8
Incident Response Plan (IR-8)
Develop an incident response plan that: Distribute copies of the incident response plan to [organization-defined]; Update the incident response plan to address system and organizational changes or problems encountered during plan implementation, execution, or testing; Communicate incident response plan changes to [organization-defined] ; and Protect the incident response plan from unauthorized disclosure and modification.
Security Baselines
LOWMODERATEHIGH
incident-responsedetectioncontainment
Why These Connect
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports22
These related controls work together — a change to one may affect the others.
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Related Controls(15)
CP-2Contingency Plan (CP-2)
LMH
IR-2Incident Response Training (IR-2)LMH
IR-3Incident Response Testing (IR-3)MH
IR-4Incident Handling (IR-4)LMH
IR-5Incident Monitoring (IR-5)LMH
IR-6Incident Reporting (IR-6)LMH
IR-7Incident Response Assistance (IR-7)LMH
AC-2Account Management (AC-2)LMH
CP-4Contingency Plan Testing (CP-4)LMH
IR-9Information Spillage Response (IR-9)PE-6Monitoring Physical Access (PE-6)LMH
PL-2System Security and Privacy Plans (PL-2)LMH
SA-15Development Process, Standards, and Tools (SA-15)MH
SI-12Information Management and Retention (SI-12)LMH
SR-8Notification Agreements (SR-8)LMH