T8.2.4 - INCIDENT RESPONSE TRAINING Implementation Guidance
The entity shall provide incident response training to information system users.
Back to T8.2.4 - P4 - INCIDENT RESPONSE TRAINING
In designing the incident response training, entities should customize the content and level of details based on the targeted audience to allow attendees to focus on the information that is relevant to them.
As such, end users may only need to identify an incident or suspicious activities and call the right contact, system administrators may require technical training on how to handle/remediate incidents, and incident responders may receive more specific training on forensics, reporting, system recovery, and restoration.
