IR-09Information Spillage Response

Respond to information spills by:

a. Assigning [Assignment: organization-defined personnel or roles] with responsibility for responding to information spills;

b. Identifying the specific information involved in the system contamination;

c. Alerting [Assignment: organization-defined personnel or roles] of the information spill using a method of communication not associated with the spill;

d. Isolating the contaminated system or system component;

e. Eradicating the information from the contaminated system or component;

f. Identifying other systems or system components that may have been subsequently contaminated; and

g. Performing the following additional actions: [Assignment: organization-defined actions].