IR-2(1): Simulated Events

Control Family:

Incident Response

Parent Control:

IR-2: Incident Response Training

CSF v1.1 References:

PR.AT-5

Baselines:

High

Previous Version:

NIST Special Publication 800-53 Revision 4:
IR-2(1): Simulated Events

Control Statement

Incorporate simulated events into incident response training to facilitate the required response by personnel in crisis situations.

Supplemental Guidance

Organizations establish requirements for responding to incidents in incident response plans. Incorporating simulated events into incident response training helps to ensure that personnel understand their individual responsibilities and what specific actions to take in crisis situations. Incident response training includes tabletop exercises that simulate a breach. See IR-2(3).