IR-4(6): Insider Threats – Specific Capabilities
CSF v1.1 References:
(Not part of any baseline)
- NIST Special Publication 800-53 Revision 5:
- IR-4(6): Insider Threats
The organization implements incident handling capability for insider threats.
While many organizations address insider threat incidents as an inherent part of their organizational incident response capability, this control enhancement provides additional emphasis on this type of threat and the need for specific incident handling capabilities (as defined within organizations) to provide appropriate and timely responses.