IR-1: Policy and Procedures

An OSCAL Control

- personnel or roles
  personnel or roles to whom the incident response policy is to be disseminated is/are defined;
- ir-01_odp.03
- official
  an official to manage the incident response policy and procedures is defined;
- events
  events that would require the current incident response policy to be reviewed and updated are defined;
- organization-defined personnel or roles
- personnel or roles
  personnel or roles to whom the incident response procedures are to be disseminated is/are defined;
- frequency
  the frequency at which the current incident response policy is reviewed and updated is defined;
- frequency
  the frequency at which the current incident response procedures are reviewed and updated is defined;
- events
  events that would require the incident response procedures to be reviewed and updated are defined;