IR-6 IR-6 (b) CCI-000836 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines a sample of previous security incidents to ensure the incidents were reported to the appropriate CIRT/CERT (such as US-CERT, DoD IC CERT) any security incidents IAW the incident response plan (IR-8). Reporting be conducted IAW CJCSM 6510.01B. DoD has defined the authorities as the appropriate CIRT/CERT (such as US-CERT, DoD CERT, IC CERT). IR-6 IR-6 (b) CCI-002791 High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with this Low Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level level. DoD has defined the authorities as the appropriate CIRT/CERT (such as US-CERT, DoD CERT, IC CERT). IR-7 IR-7 CCI-000839 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment will interview organizational users to determine awareness of incident response support services and quality of assistance of those services when used. If interviewing organizational users is not feasible, then review users manuals/documentation to ensures it identifies an incident response support service to contact. IR-7 (1) IR-7 (1) CCI-000840 High High High The organization Internal Web Portal Moderate Moderate Moderate conducting the (external link) inspection/assessment obtains and examines the incident response information sharing capability to validate the information sharing capability is available to organizational users.
IR-6 IR-6 (b) CCI-000836 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines a sample of previous security incidents to ensure the incidents were reported to the appropriate CIRT/CERT (such as US-CERT, DoD IC CERT) any security incidents IAW the incident response plan (IR-8). Reporting be conducted IAW CJCSM 6510.01B. DoD has defined the authorities as the appropriate CIRT/CERT (such as US-CERT, DoD CERT, IC CERT). IR-6 IR-6 (b) CCI-002791 High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the authorities as the appropriate CIRT/CERT (such as US-CERT, DoD CERT, IC CERT). Automatically compliant with this CCI because they are covered at the DoD level IR-7 IR-7 CCI-000839 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment will interview organizational users to determine awareness of incident response support services and quality of assistance of those services when used. If interviewing organizational users is not feasible, then review users manuals/documentation to ensures it identifies an incident response support service to contact. IR-7 (1) IR-7 (1) CCI-000840 High Moderate High Moderate High Moderate The organization conducting the inspection/assessment obtains and examines the incident response information sharing capability to validate the information sharing capability is available to organizational users. Internal Web Portal (external link)
RMF_Incident-Response-Plan.docx