IT Examiner School

Domain 5 The institution has a DR/BCP that is reviewed annually. They have included information regarding incident response, which includes handling cyber incidents. The detection, response and mitigation activities are handled by the MSSP, and it appears satisfactory. Incidents appear to be timely reported and are escalated as necessary.

The workpapers used for this review are available upon request for state and/or federal regulators.