Fedramp system Security Plan (ssp) High Baseline Template

Control Summary Information

Download 1.2 Mb.

Page	256/478
Date	16.12.2020
Size	1.2 Mb.
	#54609

1 ... 252 253 254 255 256 257 258 259 ... 478

FedRAMP-SSP-High-Baseline-Template
FedRAMP-SSP-High-Baseline-Template, North Carolina Summary Table of Ecoregion Characteristics

IR-2 Incident Response Training (H)
IR-2 (1) Control Enhancement (H)

Control Summary Information

Responsible Role:
Parameter IR-1(a):
Parameter IR-1(b)(1):
Parameter IR-1(b)(2):
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific)

IR-1 What is the solution and how is it implemented?
Part a
Part b

IR-2 Incident Response Training (H)

The organization provides incident response training to information system users consistent with assigned roles and responsibilities in accordance with NIST SP 800-53 Rev 4:

Within [FedRAMP Assignment: ten (10) days] of assuming an incident response role or responsibility;
When required by information system changes; and
[FedRAMP Assignment: at least annually] thereafter.

IR-2	Control Summary Information
Responsible Role:
Parameter IR-2(a):
Parameter IR-2(c):
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

IR-2 What is the solution and how is it implemented?
Part a
Part b
Part c

IR-2 (1) Control Enhancement (H)

The organization incorporates simulated events into incident response training to facilitate effective response by personnel in crisis situations.

IR-2 (1)	Control Summary Information
Responsible Role:
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

IR-2 (1) What is the solution and how is it implemented?

Download 1.2 Mb.

Share with your friends: