IR-9(3): Post-spill Operations

Control Family:

Incident Response

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Implement the following procedures to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions: [Assignment: organization-defined procedures].

Supplemental Guidance

Corrective actions for systems contaminated due to information spillages may be time-consuming. Personnel may not have access to the contaminated systems while corrective actions are being taken, which may potentially affect their ability to conduct organizational business.