IR-7: Incident Response Assistance

Control Family:

Incident Response

CSF v1.1 References:

PF v1.0 References:


  • Low
    • IR-7
  • Moderate
  • High
  • Privacy
    • IR-7

Previous Version:

Control Statement

Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.

Supplemental Guidance

Incident response support resources provided by organizations include help desks, assistance groups, automated ticketing systems to open and track incident response tickets, and access to forensics services or consumer redress services, when required.

Control Enhancements

IR-7(2): Coordination with External Providers


(Not part of any baseline)

Establish a direct, cooperative relationship between its incident response capability and external providers of system protection capability; and Identify organizational incident response team members to the external providers.