---

id: "IR-03(01)" title: "Automated Testing" family: "IR" family_name: "Incident Response" sort_id: "ir-03.01" priority: "P2" implementation_level: "organization" parent: "IR-03" enhancement: True

---

Statement

Test the incident response capability using {{ insert: param, ir-03.01_odp }}.

Guidance

Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities. This can be accomplished by providing more complete coverage of incident response issues, selecting realistic test scenarios and environments, and stressing the response capability.

Assessment Objective

the incident response capability is tested using {{ insert: param, ir-03.01_odp }}.

Incident response policy

contingency planning policy

procedures addressing incident response testing

procedures addressing contingency plan testing

incident response testing documentation

incident response test results

incident response test plan

incident response plan

contingency plan

system security plan

automated mechanisms supporting incident response tests

other relevant documents or records

Organizational personnel with incident response testing responsibilities

organizational personnel with information security responsibilities

Automated mechanisms that more thoroughly and effectively test the incident response capability