NIST: Respond

The Respond core function of the NIST framework focuses on responding quickly and efficiently to a cyber incident or other crisis. This includes setting up systems and processes to respond quickly to an incident, mitigate its impact and restore normal operations. The core Respond function helps organizations respond quickly and efficiently to an incident, reduce its impact and restore normal operations. This includes:

• Establish incident response plans and procedures for responding to an incident.
• Create a crisis communication plan for informing stakeholders about the incident and the recovery process.
• Establish a business continuity plan (BCP) to ensure that critical processes can continue to function during an incident.
• Training employees on incident response and their role in responding to an incident
• Testing incident response plans and BCP to ensure their adequacy.