|IR-3 (1) Automated Testing || |
Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities, for example: (i) by providing more complete coverage of incident response issues; (ii) by selecting more realistic test scenarios and test environments; and (iii) by stressing the response capability.
The organization employs automated mechanisms to more thoroughly and effectively test the incident response capability.
|IR-3 (2) Coordination With Related Plans ||MODERATE |
Organizational plans related to incident response testing include, for example, Business Continuity Plans, Contingency Plans, Disaster Recovery Plans, Continuity of Operations Plans, Crisis Communications Plans, Critical Infrastructure Plans, and Occupant Emergency Plans.
The organization coordinates incident response testing with organizational elements responsible for related plans.