IR-9(3): Post-Spill Operations

Control Family:

Incident Response

Parent Control:

IR-9: Information Spillage Response

Priority:

P0: Security control not selected in any baseline.

CSF v1.1 References:

ID.SC-5
PR.IP-9

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
IR-9(3): Post-spill Operations

Control Statement

The organization implements [Assignment: organization-defined procedures] to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions.

Supplemental Guidance

Correction actions for information systems contaminated due to information spillages may be very time-consuming. During those periods, personnel may not have access to the contaminated systems, which may potentially affect their ability to conduct organizational business.