System Security Plan (ssp) Categorization: Moderate-Low-Low
Download 0.65 Mb.
|
- Navigate this page:
- IR-3 – Incident Response Testing
- IR-4 – Incident Handling
- IR-4(1) – Incident Handling: Automated Incident Handling Processes
- IR-4(4) – Incident Handling: Information Correlation
- IR-4(7) – Incident Handling: Insider Threats – Intra-Organization Coordination
- IR-5 – Incident Monitoring
- IR-6(1) – Incident Reporting: Automated Reporting
- IR-7 – Incident Response Assistance
- IR-7(2) – Incident Response Assistance: Coordination with External Providers
- IR-8 – Incident Response Plan
- IR-9(1) – Information Spillage Response: Responsible Personnel
- IR-9(4) – Information Spillage Response: Exposure to Unauthorized Personnel
- IR-10 – Integrated Information Security Cell
Incident Response (IR)IR-1 – Incident Response Policy and ProceduresProgram-specific policies and procedures shall be included in the specific security controls listed below. There is no requirement for the Program to develop additional policy to meet the -1 control.IA-8(4) Recommended Continuous Monitoring Frequency: Annual Program Frequency:
When required by information system changes Click here to enter text. At least annually thereafter. Click here to enter text. CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-3 – Incident Response TestingRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-3(2) – Incident Response Testing and Exercises: Coordination with Related PlansRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-4 – Incident HandlingRecommended Continuous Monitoring Frequency: Annual Program Frequency:
Coordinates incident handling activities with contingency planning activities; Click here to enter text. Incorporates lessons learned from ongoing incident handling activities into incident response procedures, training, and testing/exercises, and implements the resulting changes accordingly. Click here to enter text. CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-4(3) – Incident Handling: Continuity of OperationsRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-4(6) – Incident Handling: Insider Threats – Specific CapabilitiesRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-4(8) – Incident Handling: Correlation with External OrganizationRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-5 – Incident MonitoringRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-6 – Incident ReportingRecommended Continuous Monitoring Frequency: Annual Program Frequency:
Reports security incident information to the appropriate DSS representative. Click here to enter text. CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-6(2) – Incident Reporting: Vulnerabilities Related to IncidentsRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-7 – Incident Response AssistanceRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-7(1) – Incident Response Assistance: Automation Support for Availability of InformationRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-8 – Incident Response PlanRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-9 – Information Spillage ResponseRecommended Continuous Monitoring Frequency: Annual Program Frequency:
Alerting personnel of the information spill using a method of communication not associated with the spill; Click here to enter text. Isolating the contamination information system or system component; Click here to enter text. Eradicating the information from the contaminated information system or component; Click here to enter text. Identifying other IS or system components that may have been subsequently contaminated; Click here to enter text. Performing actions as required by NISPOM. Click here to enter text. CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-9(2) – Information Spillage Response: TrainingRecommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
IR-10 – Integrated Information Security CellThe control description must include the means by which the organization addresses the privacy-related implementation of this control. Recommended Continuous Monitoring Frequency: Annual Program Frequency:
CONTINUOUS MONITORING STRATEGY Click here to enter text.
Directory: documents documents -> Concept stage documents -> Concept stage documents -> The great global switch-off documents -> Nonprofit grant application documents -> The Truth about the Rwandan Genocide documents -> Annual InStructional unit plan documents -> Chaos equipment included Download 0.65 Mb. Share with your friends:
|