IR-7

Incident Response Assistance

Incident Response (IR)

Baselines

Low · IncludedModerate · IncludedHigh · Included

Description

Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.

Discussion

Incident response support resources provided by organizations include help desks, assistance groups, automated ticketing systems to open and track incident response tickets, and access to forensics services or consumer redress services, when required.

Implementation guidance

No content available.

CSF 2.0 crosswalk

RS.CO-02Internal and external stakeholders are notified of incidentsRespond

RS.CO-03Information is shared with designated internal and external stakeholdersRespond

RS.MA-01The incident response plan is executed in coordination with relevant third parties once an incident is declaredRespond

RS.MA-04Incidents are escalated or elevated as neededRespond