id: "IR-04(08)" title: "Correlation with External Organizations" family: "IR" family_name: "Incident Response" sort_id: "ir-04.08" priority: "P2" implementation_level: "organization" parent: "IR-04" enhancement: True
Statement
Coordinate with {{ insert: param, ir-04.08_odp.01 }} to correlate and share {{ insert: param, ir-04.08_odp.02 }} to achieve a cross-organization perspective on incident awareness and more effective incident responses.
Guidance
The coordination of incident information with external organizations—including mission or business partners, military or coalition partners, customers, and developers—can provide significant benefits. Cross-organizational coordination can serve as an important risk management capability. This capability allows organizations to leverage information from a variety of sources to effectively respond to incidents and breaches that could potentially affect the organization’s operations, assets, and individuals.
Assessment Objective
there is coordination with {{ insert: param, ir-04.08_odp.01 }} to correlate and share {{ insert: param, ir-04.08_odp.02 }} to achieve a cross-organization perspective on incident awareness and more effective incident responses.
Incident response policy
procedures addressing incident handling
list of external organizations
records of incident handling coordination with external organizations
incident response plan
system security plan
privacy plan
other relevant documents or records
Organizational personnel with incident handling responsibilities
organizational personnel with information security and privacy responsibilities
personnel from external organizations with whom incident response information is to be coordinated, shared, and correlated
Organizational processes for coordinating incident handling information with external organizations