NIST 800-53 Rev. 5

IR-3(1): Incident Response Testing | Automated Testing

Control Text:

Test the incident response capability using [Assignment: organization-defined automated mechanisms].

Organizations use automated mechanisms to more thoroughly and effectively test incident response capabilities. This can be accomplished by providing more complete coverage of incident response issues, selecting realistic test scenarios and environments, and stressing the response capability.

Related Controls

  • None