id: "IR-07" title: "Incident Response Assistance" family: "IR" family_name: "Incident Response" sort_id: "ir-07" priority: "P2" implementation_level: "organization" enhancements: - ir-7.1 - ir-7.2


Statement

Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.

Guidance

Incident response support resources provided by organizations include help desks, assistance groups, automated ticketing systems to open and track incident response tickets, and access to forensics services or consumer redress services, when required.

Assessment Objective: an incident response support resource, integral to the organizational incident response capability, is provided;

Assessment Objective: the incident response support resource offers advice and assistance to users of the system for the response and reporting of incidents.

Incident response policy

procedures addressing incident response assistance

incident response plan

system security plan

privacy plan

other relevant documents or records

Organizational personnel with incident response assistance and support responsibilities

organizational personnel with access to incident response support and assistance capability

organizational personnel with information security and privacy responsibilities

Organizational processes for incident response assistance

mechanisms supporting and/or implementing incident response assistance