Post-Spill Operations IR-9(3)


Overview:
The organization implements [Assignment: organization-defined procedures] to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions.


Supplemental Guidance:
Correction actions for information systems contaminated due to information spillages may be very time-consuming. During those periods, personnel may not have access to the contaminated systems, which may potentially affect their ability to conduct organizational business.


Action Items:
1) Ensure systems have contingency plans bases on information spillage


Related Documents:
1) Incident Response Plan

2) Business Continuity Plan

3) Disaster Recovery Plan


Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
none


Moderate Additional FedRAMP Requirements and Guidance
none



Article ID: 733
Created: September 30, 2022
Last Updated: September 30, 2022
Author: Matthew Burdick

Online URL: http://www.compliancewiki.org/article/post-spill-operations-ir-9-3-733.html