id: "IR-06(01)" title: "Automated Reporting" family: "IR" family_name: "Incident Response" sort_id: "ir-06.01" priority: "P2" implementation_level: "organization" parent: "IR-06" enhancement: True
Statement
Report incidents using {{ insert: param, ir-06.01_odp }}.
Guidance
The recipients of incident reports are specified in IR-6b . Automated reporting mechanisms include email, posting on websites (with automatic updates), and automated incident response tools and programs.
Assessment Objective
incidents are reported using {{ insert: param, ir-06.01_odp }}.
Incident response policy
procedures addressing incident reporting
automated mechanisms supporting incident reporting
system design documentation
system configuration settings and associated documentation
incident response plan
system security plan
other relevant documents or records
Organizational personnel with incident reporting responsibilities
organizational personnel with information security responsibilities
Organizational processes for incident reporting
automated mechanisms supporting and/or implementing the reporting of security incidents