id: "IR-09(02)" title: "Training" family: "IR" family_name: "Incident Response" sort_id: "ir-09.02" priority: "P2" implementation_level: "organization" parent: "IR-09" enhancement: True
Statement
Provide information spillage response training {{ insert: param, ir-09.02_odp }}.
Guidance
Organizations establish requirements for responding to information spillage incidents in incident response plans. Incident response training on a regular basis helps to ensure that organizational personnel understand their individual responsibilities and what specific actions to take when spillage incidents occur.
Assessment Objective
information spillage response training is provided {{ insert: param, ir-09.02_odp }}.
Incident response policy
procedures addressing information spillage response training
information spillage response training curriculum
information spillage response training materials
incident response plan
system security plan
information spillage response training records
other relevant documents or records
Organizational personnel with incident response training responsibilities
organizational personnel with information security responsibilities