Incident Response Policy and Procedures
Medium Priority
Intermediate Level
NIST CSF
The organization develops, documents, and disseminates incident response policy and procedures that address purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.
Implementation Guidance
Develop comprehensive incident response procedures that define roles and responsibilities, communication protocols, and response steps for different types of security incidents.
Best Practices
Establish incident response team, conduct regular drills, maintain incident response playbooks, implement automated detection
Testing Procedures
Conduct tabletop exercises, test incident response procedures, verify communication protocols
Related Guidelines
IR-2, IR-3, IR-4, IR-5, IR-6