(a) Notify [Assignment: organization-defined incident response personnel (identified by name and/or by role)] of detected suspicious events; and
(b) Take the following actions upon detection: [Assignment: organization-defined least-disruptive actions to terminate suspicious events].
|
|
| Control Identifier | SI-4(7) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Least-disruptive actions include initiating requests for human responses. |
| Related Controls | None. |