Skip to main content

πŸ’Ό IR-1 INCIDENT RESPONSE POLICY AND PROCEDURES

  • Contextual name: πŸ’Ό IR-1 INCIDENT RESPONSE POLICY AND PROCEDURES
  • ID: /frameworks/nist-sp-800-53-r4/ir/01
  • Located in: πŸ’Ό IR INCIDENT RESPONSE

Description​

The organization: IR-1a. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: IR-1a.1. An incident response policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and IR-1a.2. Procedures to facilitate the implementation of the incident response policy and associated incident response controls; and IR-1b. Reviews and updates the current: IR-1b.1. Incident response policy [Assignment: organization-defined frequency]; and IR-1b.2. Incident response procedures [Assignment: organization-defined frequency].

Similar​

  • Internal
    • ID: dec-c-9d6abab1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό ID.GV-1: Organizational cybersecurity policy is established and communicated
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed22

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags