IR-3(1): Automated Testing
Control Family:
Parent Control:
Baselines:
(Not part of any baseline)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- IR-3(1): Automated Testing
Control Statement
Test the incident response capability using [Assignment: organization-defined automated mechanisms].
Supplemental Guidance
Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities. This can be accomplished by providing more complete coverage of incident response issues, selecting realistic test scenarios and environments, and stressing the response capability.