Reporting Requirements
Per NIST SP 800-53, “Organizations test incident response capabilities to determine their effectiveness and identify potential weaknesses or deficiencies. Incident response testing includes the use of checklists, walk-through or tabletop exercises, and simulations (parallel or full interrupt). Incident response testing can include a determination of the effects on organizational operations and assets and individuals due to incident response.”
Specifically, Per IR-3 of NIST SP 800-53, organizations are to “Test the effectiveness of the incident response capability for the system.”
Specifically, Per IR-3 of NIST SP 800-53, organizations are to “Test the effectiveness of the incident response capability for the system.”
How to Get Started
Start by downloading our world-class incident response testing program, along with additional NIST RMF information security and privacy policies and procedures at the Arlington Security Portal (ASP).
