id: "IR-03(02)" title: "Coordination with Related Plans" family: "IR" family_name: "Incident Response" sort_id: "ir-03.02" priority: "P2" implementation_level: "organization" parent: "IR-03" enhancement: True


Statement

Coordinate incident response testing with organizational elements responsible for related plans.

Guidance

Organizational plans related to incident response testing include business continuity plans, disaster recovery plans, continuity of operations plans, contingency plans, crisis communications plans, critical infrastructure plans, and occupant emergency plans.

Assessment Objective

incident response testing is coordinated with organizational elements responsible for related plans.

Incident response policy

contingency planning policy

procedures addressing incident response testing

incident response testing documentation

incident response plan

business continuity plans

contingency plans

disaster recovery plans

continuity of operations plans

crisis communications plans

critical infrastructure plans

occupant emergency plans

system security plan

privacy plan

other relevant documents or records

Organizational personnel with incident response testing responsibilities

organizational personnel with responsibilities for testing organizational plans related to incident response testing

organizational personnel with information security and privacy responsibilities