IR-3(2): Coordination With Related Plans

Control Family:

Incident Response

Parent Control:

IR-3: Incident Response Testing

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

ID.SC-5
PR.IP-10
RS.CO-1

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5:
IR-3(2): Coordination with Related Plans

Control Statement

The organization coordinates incident response testing with organizational elements responsible for related plans.

Supplemental Guidance

Organizational plans related to incident response testing include, for example, Business Continuity Plans, Contingency Plans, Disaster Recovery Plans, Continuity of Operations Plans, Crisis Communications Plans, Critical Infrastructure Plans, and Occupant Emergency Plans.