IR-8: Incident Response Plan

An OSCAL Control

- personnel or roles
  personnel or roles that review and approve the incident response plan is/are identified;
- entities, personnel, or roles
  entities, personnel, or roles with designated responsibility for incident response are defined;
- organizational elements
  organizational elements to which copies of the incident response plan are to be distributed are defined;
- incident response personnel
  incident response personnel (identified by name and/or by role) to whom changes to the incident response plan is/are communicated are defined;
- organizational elements
  organizational elements to which changes to the incident response plan are communicated are defined;
- organization-defined incident response personnel (identified by name and/or by role) and organizational elements
- frequency
  the frequency at which to review and approve the incident response plan is defined;
- incident response personnel
  incident response personnel (identified by name and/or by role) to whom copies of the incident response plan are to be distributed is/are defined;