IR-4(6): Insider Threats – Specific Capabilities
Control Family:
Parent Control:
CSF v1.1 References:
Baselines:
(Not part of any baseline)
Next Version:
- NIST Special Publication 800-53 Revision 5:
- IR-4(6): Insider Threats
Control Statement
The organization implements incident handling capability for insider threats.
Supplemental Guidance
While many organizations address insider threat incidents as an inherent part of their organizational incident response capability, this control enhancement provides additional emphasis on this type of threat and the need for specific incident handling capabilities (as defined within organizations) to provide appropriate and timely responses.