| TIP: NIST SP 800-53 r4 - Security Control Family: Incident Response

NIST SP 800-53 r4 - Security Control Family: Incident Response - Controls for HIGH Impact Systems, v4

Profile of requirements corresponding to all HIGH impact security controls in NIST Special Publication 800-53, r4, under the control family of Incident Response.

Identifier

https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4---security-control-family_-incident-response---controls-for-high-impact-systems/4/

Publication Date

2021-04-26

Issuing Organization

TMI (https://trustmarkinitiative.org/) View Contact

No Responder

help@trustmarkinitiative.org

555-555-5555

No Mailing Address

Keywords

800-53, Incident Response, NIST, Security, High

Legal Notice

This document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.

Tree View
Details View

Trust Expression:

TIP_NISTSP80053r4SecurityControlFamilyIncidentResponseControlsforMODERATEImpactSystems and TIP_NISTSP80053r4SecurityControlIR1IncidentResponsePolicyandProcedures and TIP_NISTSP80053r4SecurityControlIR2IncidentResponseTraining and TIP_NISTSP80053r4SecurityControlIR21SimulatedEvents and TIP_NISTSP80053r4SecurityControlIR22AutomatedTrainingEnvironments and TIP_NISTSP80053r4SecurityControlIR3IncidentResponseTesting and TIP_NISTSP80053r4SecurityControlIR32CoordinationwithRelatedPlans and TIP_NISTSP80053r4SecurityControlIR4IncidentHandling and TIP_NISTSP80053r4SecurityControlIR41AutomatedIncidentHandlingProcesses and TIP_NISTSP80053r4SecurityControlIR44InformationCorrelation and TIP_NISTSP80053r4SecurityControlIR5IncidentMonitoring and TIP_NISTSP80053r4SecurityControlIR51AutomatedTrackingDataCollectionAnalysis and TIP_NISTSP80053r4SecurityControlIR6IncidentReporting and TIP_NISTSP80053r4SecurityControlIR61AutomatedReporting and TIP_NISTSP80053r4SecurityControlIR7IncidentResponseAssistance and TIP_NISTSP80053r4SecurityControlIR71AutomationSupportforAvailabilityofInformationSupport and TIP_NISTSP80053r4SecurityControlIR8IncidentResponsePlan

References (17)

TIP NIST SP 800-53 r4 - Security Control Family: Incident Response - Controls for MODERATE Impact Systems, v4
Description	Profile of requirements corresponding to all MODERATE impact security controls in NIST Special Publication 800-53, r4, under the control family of Incident Response.
ID	TIP_NISTSP80053r4SecurityControlFamilyIncidentResponseControlsforMODERATEImpactSystems

TIP NIST SP 800-53 r4 Security Control IR-1: Incident Response Policy and Procedures, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-1: Incident Response Policy and Procedures. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR1IncidentResponsePolicyandProcedures

TIP NIST SP 800-53 r4 Security Control IR-2: Incident Response Training, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-2: Incident Response Training. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR2IncidentResponseTraining

TIP NIST SP 800-53 r4 Security Control IR-2 (1): Simulated Events, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-2 (1): Simulated Events. Applicable to HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR21SimulatedEvents

TIP NIST SP 800-53 r4 Security Control IR-2 (2): Automated Training Environments, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-2 (2): Automated Training Environments. Applicable to HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR22AutomatedTrainingEnvironments

TIP NIST SP 800-53 r4 Security Control IR-3: Incident Response Testing, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-3: Incident Response Testing. Applicable to MODERATE impact and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR3IncidentResponseTesting

TIP NIST SP 800-53 r4 Security Control IR-3 (2): Coordination with Related Plans, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-3 (2): Coordination with Related Plans. Applicable to MODERATE impact and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR32CoordinationwithRelatedPlans

TIP NIST SP 800-53 r4 Security Control IR-4: Incident Handling, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-4: Incident Handling. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR4IncidentHandling

TIP NIST SP 800-53 r4 Security Control IR-4 (1): Automated Incident Handling Processes, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-4 (1): Automated Incident Handling Processes. Applicable to MODERATE impact and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR41AutomatedIncidentHandlingProcesses

TIP NIST SP 800-53 r4 Security Control IR-4 (4): Information Correlation, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-4 (4): Information Correlation. Applicable to HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR44InformationCorrelation

TIP NIST SP 800-53 r4 Security Control IR-5: Incident Monitoring, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-5: Incident Monitoring. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR5IncidentMonitoring

TIP NIST SP 800-53 r4 Security Control IR-5 (1): Automated Tracking / Data Collection / Analysis, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-5 (1): Automated Tracking / Data Collection / Analysis. Applicable to HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR51AutomatedTrackingDataCollectionAnalysis

TIP NIST SP 800-53 r4 Security Control IR-6: Incident Reporting, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-6: Incident Reporting. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR6IncidentReporting

TIP NIST SP 800-53 r4 Security Control IR-6 (1): Automated Reporting, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-6 (1): Automated Reporting. Applicable to MODERATE impact and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR61AutomatedReporting

TIP NIST SP 800-53 r4 Security Control IR-7: Incident Response Assistance, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-7: Incident Response Assistance. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR7IncidentResponseAssistance

TIP NIST SP 800-53 r4 Security Control IR-7 (1): Automation Support for Availability of Information / Support, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-7 (1): Automation Support for Availability of Information / Support. Applicable to MODERATE impact and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR71AutomationSupportforAvailabilityofInformationSupport

TIP NIST SP 800-53 r4 Security Control IR-8: Incident Response Plan, v4
Description	Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control IR-8: Incident Response Plan. Applicable to LOW impact, MODERATE impact, and HIGH impact systems.
ID	TIP_NISTSP80053r4SecurityControlIR8IncidentResponsePlan

Sources (1)

SP800-53R4	NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at http://dx.doi.org/10.6028/NIST.SP.800-53r4.

Also available as XML or JSON