Reference: DoDI 8520.2, ENCL 3, PAR 3.C; SECNAV 5211.5E, PAR 7.H; ECSM 011, PAR 5.3 Subsection 6 INCIDENT RESPONSE/VULNERABILITY MANAGEMENT – 0601 Does a local incident response plan exist in writing that defines reportable incidents, establishes an incident response team, outlines local incident response operating procedures and provides user training? Reference: CJCSM 6510.01B, Encl E, PAR 2.D; SECNAV 3501.1C, PAR 6.C. 0602 Does the command have a spillage policy containing responsibilities and reporting requirements, and is this policy part of the unit training? Reference: CJCSI 6510.01F Encl. C PAR 29; CNSSP 18, SECT IV; SECNAV 5239.3C, Encl 2; ECSM 001, Section 4; ECSM 010, PAR 3.3.b 0603 Does the command adhere to and maintain accountability of computer network Directives (OpDirs, CTO’s, FragO’s, etc…) to ensure compliance of system vulnerabilities? This includes documenting and maintaining plan of action and milestones for non-compliant directives. Reference: SECNAV 5239.3C, Encl 2; MCO 5239.2B, PAR 3.(J&K); ECSM 020, PAR 2.4. 0604 Does the command have established compliance procedures to ensure computing hosts/devices are not connected to the local garrison and tactical networks until the command ISSM/ISSO, or equivalent authority, has verified and approved the security compliance of those assets? Reference: DOD 8510.01, Encl 6, PAR 2; ECSM 018, Section 2.6; ESCM 020, PAR 4.2.3 Subsection 7 CONTINGENCY PLANNING AND CONTINUITY OF OPERATIONS – 0701 Has the command identified mission/business essential records and mission essential functions (e.g., computer-based services, data and
Reference: DoDI 8520.2, ENCL 3, PAR 3.C; SECNAV 5211.5E, PAR 7.H; ECSM 011, PAR 5.3 Subsection 6 – INCIDENT RESPONSE/VULNERABILITY MANAGEMENT 0601 Does a local incident response plan exist in writing that defines reportable incidents, establishes an incident response team, outlines local incident response operating procedures and provides user training? Reference: CJCSM 6510.01B, Encl E, PAR 2.D; SECNAV 3501.1C, PAR 6.C. 0602 Does the command have a spillage policy containing responsibilities and reporting requirements, and is this policy part of the unit training? Reference: CJCSI 6510.01F Encl. C PAR 29; CNSSP 18, SECT IV; SECNAV 5239.3C, Encl 2; ECSM 001, Section 4; ECSM 010, PAR 3.3.b 0603 Does the command adhere to and maintain accountability of computer network Directives (OpDirs, CTO’s, FragO’s, etc…) to ensure compliance of system vulnerabilities? This includes documenting and maintaining plan of action and milestones for non-compliant directives. Reference: SECNAV 5239.3C, Encl 2; MCO 5239.2B, PAR 3.(J&K); ECSM 020, PAR 2.4. 0604 Does the command have established compliance procedures to ensure computing hosts/devices are not connected to the local garrison and tactical networks until the command ISSM/ISSO, or equivalent authority, has verified and approved the security compliance of those assets? Reference: DOD 8510.01, Encl 6, PAR 2; ECSM 018, Section 2.6; ESCM 020, PAR 4.2.3 Subsection 7 – CONTINGENCY PLANNING AND CONTINUITY OF OPERATIONS 0701 Has the command identified mission/business essential records and mission essential functions (e.g., computer-based services, data and
CYBER%20SECURITY%20MANAGEMENT%20(5239).DOCX