IR-3(1): Automated Testing

Control Family:

Incident Response

Parent Control:

IR-3: Incident Response Testing

CSF v1.1 References:

ID.SC-5
PR.IP-7
PR.IP-10
RS.CO-1

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
IR-3(1): Automated Testing

Control Statement

Test the incident response capability using [Assignment: organization-defined automated mechanisms].

Supplemental Guidance

Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities. This can be accomplished by providing more complete coverage of incident response issues, selecting realistic test scenarios and environments, and stressing the response capability.