Incident Response (IR) templates
Templates for the Incident Response (IR) family of controls in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Revision 5, with the family policy and procedure first.
- Incident Response PolicyPOL-IR
In this policy, the CISO sets the Organization's requirements for incident response in every information system that the Organization operates or that others operate for it. The CISO issues the policy under these authorities:
- Incident Response ProcedurePROC-IR
The people named in this procedure use it to carry out the IR control family policy (POL-IR). It covers every control in the incident response family. The steps, the people responsible, and the evidence below show how the Organization meets those National Institute of Standards and Technology (NIST) SP 800-53 Rev.
- CUI Challenges and Misuse Reporting ProcedurePROC-CUI-004
Use this procedure to bring and answer a challenge to a CUI designation, and to report and look into misuse of CUI. It covers challenges and reports from personnel and from authorized holders outside the Organization.
- Breach Response PlanPLAN-BR-001
- Incident Response PlanPLAN-IR-001
The Organization uses this plan to detect, report, and respond to incidents. The plan covers the structure of the incident response capability, the incidents the Organization reports, the reports and their deadlines, the measures of the capability, and the resources it needs.