IR-8(b) Additional FedRAMP Requirements and Guidance:
Requirement: The service provider defines a list of incident response personnel (identified by name and/or by role) and organizational elements. The incident response list includes designated FedRAMP personnel.
Reviews the incident response plan [FedRAMP Assignment: at least annually];