← CIS Controls v8 in plain English

17.1 IG1

Control 17 / Incident Response Management

Designate Personnel to Manage Incident Handling

Think of it likeAssigning a family member to be in charge during an emergency.

In plain English

The family designates specific individuals to manage incident response, just as they would assign someone to take charge during an emergency.

Related CSF subcategories (unofficial mapping)

GV.RR-02: Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced.ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved.RS.MA-01: The incident response plan is executed in coordination with relevant third parties once an incident is declared.