adammontville
commented
5 years ago Input
- Incident response plan
- List of relevant third-party incident reporting entities
Operations:
- Determine whether incident response plan exists (becomes M1)
- If it exists, then manual review of incident response plan (determine M2)
Measures:
- M1: A plan exists
- M2: The plan includes information on third-party contacts for incident reporting (M1 includes Input 2)
Metrics:
- M1 AND M2
Assemble and maintain information on third-party contact information to be used to report a security incident, such as Law Enforcement, relevant government departments, vendors, and ISAC partners.
Measures
Metrics/KEI
No comment