RS.MA-01:
The incident response plan is executed in coordination with relevant third parties once an incident is declared
Implementation Examples
Ex1:
Detection technologies automatically report confirmed incidents
Ex2:
Request incident response assistance from the organization's incident response outsourcer
Ex3:
Designate an incident lead for each incident
Ex4:
Initiate execution of additional cybersecurity plans as needed to support incident response (for example, business continuity and disaster recovery)