IR-4.6: Insider Threats

Incident response policy

procedures addressing incident handling

mechanisms supporting incident handling

system design documentation

system configuration settings and associated documentation

incident response plan

system security plan

audit records

other relevant documents or records

Organizational personnel with incident handling responsibilities

organizational personnel with information security responsibilities

Incident handling capability for the organization