Doc:NIST SP 800-53r3 Appendix F/IR-2

From FISMApedia
Jump to: navigation, search

IR-2 INCIDENT RESPONSE TRAINING

Control: The organization:
a. Trains personnel in their incident response roles and responsibilities with respect to the information system; and
b. Provides refresher training [Assignment: organization-defined frequency].
Supplemental Guidance: Incident response training includes user training in the identification and reporting of suspicious activities, both from external and internal sources. Related control: AT-3.
Control Enhancements: