An Arlington Brief
Incident Response Policies and Procedures
A Must for Federal Compliance Reporting
Overview
A strict requirement for federal contractors providing essential services to federal agencies is developing a wide-range of information security and privacy controls. Whatever the compliance mandate being imposed upon federal contractors is - FISMA, FedRAMP, eMASS RMF, DFARS NIST 800-171, CMMC, and more - information security and privacy policies and procedures are a must. Additionally, such documentation must be developed in accordance with none other than NIST SP 800-53, the unquestioned framework that’s been adopted by federal agencies - and federal contractors - since 2005.
Arlington Security Portal
Get Access to 100 + NIST RMF security and privacy policies & procedures, programs, and plan templates.
Reporting Requirements
Per NIST SP 800-53, “Incident response policy and procedures address the controls in the IR family that are implemented within systems and organizations. The risk management strategy is an important factor in establishing such policies and procedures.”
Specifically, Per IR-1 of NIST SP 800-53, organizations are to “...develop, document, and disseminate…” an incident response policy and procedure. Additionally, within the IR family itself (i.e., IR-8) there are controls that also require organizations to develop an actual incident response plan.
Specifically, Per IR-1 of NIST SP 800-53, organizations are to “...develop, document, and disseminate…” an incident response policy and procedure. Additionally, within the IR family itself (i.e., IR-8) there are controls that also require organizations to develop an actual incident response plan.
How to Get Started
Start by downloading our world-class incident response policy and procedures template, along with additional NIST RMF information security and privacy policies and procedures at the Arlington Security Portal (ASP).
Arlington Can Help
We have years of experience working within the broader federal agency apparatus in helping federal contractors develop high-quality, well-written, policies and procedures and additional NIST RMF information security and privacy materials. Our NIST RMF information security and privacy policies, procedures, programs, and plans have been used by thousands of federal contractors in helping organizations develop customized documentation for their growing security and compliance needs.
Arlington Security Portal
Get Access to 100 + NIST RMF security and privacy policies & procedures, programs, and plan templates.