IR-9 IR-9 (b) CCI-002807 High The organization being Automatically Moderate inspected/assessed is compliant with this Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level. DoD has defined the personnel or roles as at a minimum, the OCA, the information owner/originator, the ISSM, the activity security manager, and the responsible computer incident response center. IR-9 IR-9 (c ) CCI-002808 High The organization Moderate conducting the Low inspection/assessment obtains and examines the incident response plan as well as after action reports of incidents to ensure that the organization being inspected/assessed isolates contaminated information system or system component. IR-9 IR-9 (d) CCI-002809 High The organization Moderate conducting the Low inspection/assessment obtains and examines the incident response plan as well as after action reports of incidents to ensure that the organization being inspected/assessed eradicates the information from the contaminated information system or component. IR-9 IR-9 (e ) CCI-002810 High The organization Moderate conducting the Low inspection/assessment obtains and examines the incident response plan as well as after action reports of incidents to ensure that the organization being inspected/assessed identifies other information systems or system components that may have been subsequently contaminated.
IR-9 IR-9 (b) CCI-002807 High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as at a minimum, the OCA, the information owner/originator, the ISSM, the activity security manager, and the responsible computer incident response center. Automatically compliant with this CCI because they are covered at the DoD IR-9 IR-9 (c ) CCI-002808 High Moderate Low The organization conducting the inspection/assessment obtains and examines the incident response plan as well as after action reports of incidents to ensure that the organization being inspected/assessed isolates contaminated information system or system component. IR-9 IR-9 (d) CCI-002809 High Moderate Low The organization conducting the inspection/assessment obtains and examines the incident response plan as well as after action reports of incidents to ensure that the organization being inspected/assessed eradicates the information from the contaminated information system or component. IR-9 IR-9 (e ) CCI-002810 High Moderate Low The organization conducting the inspection/assessment obtains and examines the incident response plan as well as after action reports of incidents to ensure that the organization being inspected/assessed identifies other information systems or system components that may have been subsequently contaminated.