IR-3(1): Automated Testing

Control Family:

Incident Response

CSF v1.1 References:

CSF v2.0 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Test the incident response capability using [Assignment: organization-defined automated mechanisms].

Supplemental Guidance

Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities. This can be accomplished by providing more complete coverage of incident response issues, selecting realistic test scenarios and environments, and stressing the response capability.