IR-9(2): Training

Control Family:

Incident Response

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Provide information spillage response training [Assignment: organization-defined frequency].

Supplemental Guidance

Organizations establish requirements for responding to information spillage incidents in incident response plans. Incident response training on a regular basis helps to ensure that organizational personnel understand their individual responsibilities and what specific actions to take when spillage incidents occur.