← CIS Controls v8 in plain English

17.5 IG2

Control 17 / Incident Response Management

Assign Key Roles and Responsibilities

Think of it likeAssigning each family member a specific role during an emergency, like who calls the police or checks on the kids.

In plain English

Specific roles and responsibilities are assigned for handling incidents, so everyone knows their job in a crisis.

Related CSF subcategories (unofficial mapping)

GV.RR-02: Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced.ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved.RS.CO-02: Internal and external stakeholders are notified of incidents.RS.MA-01: The incident response plan is executed in coordination with relevant third parties once an incident is declared.RS.MA-04: Incidents are escalated or elevated as needed.