Skip to main content

💼 IR-8(1) Incident Response Plan | Breaches

  • Contextual name: 💼 IR-8(1) Incident Response Plan | Breaches
  • ID: /frameworks/nist-sp-800-53-r5/ir/08/01
  • Located in: 💼 IR-8 Incident Response Plan

Description​

Include the following in the Incident Response Plan for breaches involving personally identifiable information: (a) A process to determine if notice to individuals or other organizations, including oversight organizations, is needed; (b) An assessment process to determine the extent of the harm, embarrassment, inconvenience, or unfairness to affected individuals and any mechanisms to mitigate such harms; and (c) Identification of applicable privacy requirements.

Similar​

  • Internal
    • ID: dec-c-0a4f3690

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags