id: "IR-04(09)" title: "Dynamic Response Capability" family: "IR" family_name: "Incident Response" sort_id: "ir-04.09" priority: "P2" implementation_level: "organization" parent: "IR-04" enhancement: True
Statement
Employ {{ insert: param, ir-04.09_odp }} to respond to incidents.
Guidance
The dynamic response capability addresses the timely deployment of new or replacement organizational capabilities in response to incidents. This includes capabilities implemented at the mission and business process level and at the system level.
Assessment Objective
{{ insert: param, ir-04.09_odp }} are employed to respond to incidents.
Incident response policy
procedures addressing incident handling
automated mechanisms supporting dynamic response capabilities
system design documentation
system configuration settings and associated documentation
incident response plan
system security plan
audit records
other relevant documents or records
Organizational personnel with incident handling responsibilities
organizational personnel with information security responsibilities
Organizational processes for dynamic response capability
automated mechanisms supporting and/or implementing the dynamic response capability for the organization