id: "IR-02(02)" title: "Automated Training Environments" family: "IR" family_name: "Incident Response" sort_id: "ir-02.02" priority: "P2" implementation_level: "organization" parent: "IR-02" enhancement: True


Statement

Provide an incident response training environment using {{ insert: param, ir-02.02_odp }}.

Guidance

Automated mechanisms can provide a more thorough and realistic incident response training environment. This can be accomplished, for example, by providing more complete coverage of incident response issues, selecting more realistic training scenarios and environments, and stressing the response capability.

Assessment Objective

an incident response training environment is provided using {{ insert: param, ir-02.02_odp }}.

Incident response policy

procedures addressing incident response training

incident response training curriculum

incident response training materials

automated mechanisms supporting incident response training

incident response plan

system security plan

privacy plan

other relevant documents or records

Organizational personnel with incident response training and operational responsibilities

organizational personnel with information security and privacy responsibilities

Automated mechanisms that provide a thorough and realistic incident response training environment