IR-4.1: Automated Incident Handling Processes

Incident response policy

procedures addressing incident handling

automated mechanisms supporting incident handling

system design documentation

system configuration settings and associated documentation

system audit records

incident response plan

system security plan

other relevant documents or records

Organizational personnel with incident handling responsibilities

organizational personnel with information security responsibilities

Automated mechanisms that support and/or implement the incident handling process