controlIR-9

Information Spillage Response (IR-9)

Respond to information spills by:

incident-responsedetectioncontainment

Why These Connect

Maps To3

These are equivalent or closely aligned requirements in other frameworks.

Supports20

These related controls work together — a change to one may affect the others.

Enhances4

These enhancements add specific capabilities or refinements to the base control.

Related Controls(13)

AT-2Literacy Training and Awareness (AT-2)

LMH

AT-3Role-based Training (AT-3)

LMH

CP-2Contingency Plan (CP-2)

LMH

CP-3Contingency Training (CP-3)

LMH

IR-2Incident Response Training (IR-2)

LMH

IR-6Incident Reporting (IR-6)

LMH

IR-8Incident Response Plan (IR-8)

LMH

PM-26Complaint Management (PM-26)PM-27Privacy Reporting (PM-27)PT-2Authority to Process Personally Identifiable Information (PT-2)PT-3Personally Identifiable Information Processing Purposes (PT-3)PT-7Specific Categories of Personally Identifiable Information (PT-7)RA-7Risk Response (RA-7)

LMH

Cross-Framework Mappings(3)

RS.MAIncident Management (RS.MA)Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

HIPAAHIPAA Security Rule1 mappingFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

RS.MAIncident Management (RS.MA)Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(3)

Assignmentorganization-defined personnel or roles

Assignmentorganization-defined actions

Control Enhancements(4)

IR-9(1)Responsible Personnel (IR-9(1))W

IR-9(2)Training (IR-9(2))

IR-9(3)Post-spill Operations (IR-9(3))

IR-9(4)Exposure to Unauthorized Personnel (IR-9(4))