---

id: "IR-02(01)" title: "Simulated Events" family: "IR" family_name: "Incident Response" sort_id: "ir-02.01" priority: "P2" implementation_level: "organization" parent: "IR-02" enhancement: True

---

Statement

Incorporate simulated events into incident response training to facilitate the required response by personnel in crisis situations.

Guidance

Organizations establish requirements for responding to incidents in incident response plans. Incorporating simulated events into incident response training helps to ensure that personnel understand their individual responsibilities and what specific actions to take in crisis situations.

Assessment Objective

simulated events are incorporated into incident response training to facilitate the required response by personnel in crisis situations.

Incident response policy

procedures addressing incident response training

incident response training curriculum

incident response training materials

incident response plan

system security plan

privacy plan

other relevant documents or records

Organizational personnel with incident response training and operational responsibilities

organizational personnel with information security and privacy responsibilities

Mechanisms that support and/or implement simulated events for incident response training