IR-3(1): Automated Testing

Control Family:

Incident Response

Parent Control:

IR-3: Incident Response Testing

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

ID.SC-5
PR.IP-10
RS.CO-1

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
IR-3(1): Automated Testing

Control Statement

The organization employs automated mechanisms to more thoroughly and effectively test the incident response capability.

Supplemental Guidance

Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities, for example: (i) by providing more complete coverage of incident response issues; (ii) by selecting more realistic test scenarios and test environments; and (iii) by stressing the response capability.