IBM Cloud Docs
IR-3 (2) - Coordination with Related Plans

IR-3 (2) - Coordination with Related Plans

Control requirements

IR-3 (2) - 0

Coordinate incident response testing with organizational elements responsible for related plans.

Additional IBM Cloud for Financial Services specifications

Testing must also include the time it takes for resources to assemble in response to an incident, event, or crisis.

The 3rd/4th Party Response Teams must be included as part of the exercises.

NIST supplemental guidance

Organizational plans related to incident response testing include business continuity plans, disaster recovery plans, continuity of operations plans, contingency plans, crisis communications plans, critical infrastructure plans, and occupant emergency plans.