IRO-06
Incident Response Testing
Description
Mechanisms exist to formally test incident response capabilities through realistic exercises to determine the operational effectiveness of those capabilities.
Control Question
Does the organization formally test incident response capabilities through realistic exercises to determine the operational effectiveness of those capabilities?
Control Metadata
Domain:
Incident Response
Validation Cadence:
Annual
Evidence Request List:
E-IRO-04