FedRAMP Controls / IR

IR-9 Information Spillage Response

Family IR
Baselines moderate
Mapped KSIs 0

Control statement

Respond to information spills by:
    a. Assigning {{ insert: param, ir-09_odp.01 }} with responsibility for responding to information spills;
    b. Identifying the specific information involved in the system contamination;
    c. Alerting {{ insert: param, ir-09_odp.02 }} of the information spill using a method of communication not associated with the spill;
    d. Isolating the contaminated system or system component;
    e. Eradicating the information from the contaminated system or component;
    f. Identifying other systems or system components that may have been subsequently contaminated; and
    g. Performing the following additional actions: {{ insert: param, ir-09_odp.03 }}.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

No 20x Key Security Indicators map to this control in the current catalog version.