IR-2(1): Simulated Events
Control Family:
Parent Control:
CSF v1.1 References:
Baselines:
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- IR-2(1): Simulated Events
Control Statement
Incorporate simulated events into incident response training to facilitate the required response by personnel in crisis situations.
Supplemental Guidance
Organizations establish requirements for responding to incidents in incident response plans. Incorporating simulated events into incident response training helps to ensure that personnel understand their individual responsibilities and what specific actions to take in crisis situations. Incident response training includes tabletop exercises that simulate a breach. See IR-2(3).