Applicable (Y)es / (N)o |
(C)onfidentiality |
(I)ntegrity |
(A)vailability |
RPN (C+I+A) |
(S)atisfactory |
||||||
L1 |
M2 |
H3 |
L1 |
M2 |
H3 |
L1 |
M2 |
H3 |
(O)ther than satisfactory +## |
||
|
|
|
|
|
|
|
|
|
|
|
|
###
ir-2(1) |
incident response training | simulated events |
|
assessment objective: Determine if the organization incorporates simulated events into incident response training to facilitate effective response by personnel in crisis situations. |
potential assessment methods and objects: Examine: [select from: Incident response policy; procedures addressing incident response training; incident response training curriculum; incident response training materials; incident response plan; security plan; other relevant documents or records]. Interview: [select from: Organizational personnel with incident response training and operational responsibilities; organizational personnel with information security responsibilities]. Test: [select from: Automated mechanisms that support and/or implement simulated events for incident response training]. |