IR-3 (2) - Coordination with Related Plans
Control requirements
IR-3 (2) - 0
Coordinate incident response testing with organizational elements responsible for related plans.
Additional IBM Cloud for Financial Services specifications
Testing must also include the time it takes for resources to assemble in response to an incident, event, or crisis.
The 3rd/4th Party Response Teams must be included as part of the exercises.
NIST supplemental guidance
Organizational plans related to incident response testing include business continuity plans, disaster recovery plans, continuity of operations plans, contingency plans, crisis communications plans, critical infrastructure plans, and occupant emergency plans.