IR-2(1)_simulated-events
Incorporate simulated events into incident response training to facilitate the required response by personnel in crisis situations.
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Incorporate simulated events into incident response training to facilitate the required response by personnel in crisis situations.
Provide an incident response training environment using [organization-defined].
Provide incident response training on how to identify and respond to a breach, including the organization’s process for reporting a breach.
Provide incident response training to system users consistent with assigned roles and responsibilities: Within [organization-defined] of assuming an i
Test the incident response capability using [organization-defined].
Coordinate incident response testing with organizational elements responsible for related plans.
Test the effectiveness of the incident response capability for the system [organization-defined] using the following tests: [organization-defined].
Support the incident handling process using [organization-defined].
Analyze malicious code and/or other residual artifacts remaining in the system after the incident.
Analyze anomalous or suspected adversarial behavior in or related to [organization-defined].