The organization:
Establishes a direct, cooperative relationship between its incident response capability and external providers of information system protection capability; and
Identifies organizational incident response team members to the external providers.