19.7: Conduct Periodic Incident Scenario Sessions for Personnel

Control Statement

Plan and conduct routine incident, response exercises and scenarios for the workforce involved in the incident response to maintain awareness and comfort in responding to real-world threats. Exercises should test communication channels, decision making, and incident responders technical capabilities using tools and data available to them.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]