17.4: Establish and Maintain an Incident Response Process

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:

Group:

Previous Version:

Control Statement

Establish and maintain an incident response process that addresses roles and responsibilities, compliance requirements, and a communication plan. Review annually, or when significant enterprise changes occur that could impact this Safeguard.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]