id: "IR-09(03)" title: "Post-spill Operations" family: "IR" family_name: "Incident Response" sort_id: "ir-09.03" priority: "P2" implementation_level: "organization" parent: "IR-09" enhancement: True
Statement
Implement the following procedures to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions: {{ insert: param, ir-09.03_odp }}.
Guidance
Corrective actions for systems contaminated due to information spillages may be time-consuming. Personnel may not have access to the contaminated systems while corrective actions are being taken, which may potentially affect their ability to conduct organizational business.
Assessment Objective
{{ insert: param, ir-09.03_odp }} are implemented to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions.
Incident response policy
procedures addressing incident response
procedures addressing information spillage
incident response plan
system security plan
other relevant documents or records
Organizational personnel with incident response responsibilities
organizational personnel with information security responsibilities
Organizational processes for post-spill operations