id: "IR-07" title: "Incident Response Assistance" family: "IR" family_name: "Incident Response" sort_id: "ir-07" priority: "P2" implementation_level: "organization" enhancements: - ir-7.1 - ir-7.2
Statement
Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.
Guidance
Incident response support resources provided by organizations include help desks, assistance groups, automated ticketing systems to open and track incident response tickets, and access to forensics services or consumer redress services, when required.
Assessment Objective: an incident response support resource, integral to the organizational incident response capability, is provided;
Assessment Objective: the incident response support resource offers advice and assistance to users of the system for the response and reporting of incidents.
Incident response policy
procedures addressing incident response assistance
incident response plan
system security plan
privacy plan
other relevant documents or records
Organizational personnel with incident response assistance and support responsibilities
organizational personnel with access to incident response support and assistance capability
organizational personnel with information security and privacy responsibilities
Organizational processes for incident response assistance
mechanisms supporting and/or implementing incident response assistance