IR-8(e) Additional FedRAMP Requirements and Guidance

IR-9 Information Spillage Response (M) (H)

1. 
   Identifying the specific information involved in the information system contamination;
   
2. 
   Alerting [Assignment: organization-defined personnel or roles] of the information spill using a method of communication not associated with the spill;
   
3. 
   Isolating the contaminated information system or system component;
   
4. 
   Eradicating the information from the contaminated information system or component;
   
5. 
   Identifying other information systems or system components that may have been subsequently contaminated; and
   
6. 
   Performing other [Assignment: organization-defined actions].
   

IR-9 (1) Control Enhancement (M) (H)

The organization assigns [Assignment: organization-defined personnel or roles] with responsibility for responding to information spills.

IR-9 (1)	Control Summary Information
Responsible Role:
Parameter IR-9 (1):
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

IR-9 (1) What is the solution and how is it implemented?

Download 1.2 Mb.

Share with your friends: