← CIS Controls v8 in plain English

17.2 IG1

Control 17 / Incident Response Management

Establish and Maintain Contact Information for Reporting Security Incidents

Think of it likeKeeping a list of emergency contacts on the fridge for everyone to see.

In plain English

An up-to-date list of contacts for reporting security incidents is kept where everyone can find it.

Related CSF subcategories (unofficial mapping)

GV.SC-08: Relevant suppliers and other third parties are included in incident planning, response, and recovery activities.ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved.RS.CO-02: Internal and external stakeholders are notified of incidents.