1.07-Integrate Additional Support
Integrate Additional Support Task¶
Conditions¶
- Given a mission to deploy a IR Team in support of Guardnet, State IT systems, or other organization as directedby the Governor
- Response effort if localized and a Type I / II Federal Disaster Response has not been declared
- IR Team unable to complete mission requirements due to scope of work and additional support is requested
- Incident scope increased to Type I / II Federal Disaster Response and additional forces are necessary
Standards¶
- Coordinate with JAG / Cyber Legal personnel regarding inclusion of T10 forces in mission operations.
- In coordination with JAG / Cyber Legal personnel, The Adjutant General (TAG) determines whether or not aDual Status Commander is necessary.
- If needed, Dual Status Commander and supporting staff begins operations.
- Upon T10 (USAR or Active Duty) forces arrival, IR Team informs their State Joint Operations Center.
- Coordinate with JAG / Cyber Legal personnel regarding necessary MOUs and NDAs and appropriate scope forT10 forces.
- Coordinate with JAG / Cyber Legal personnel to review the Rules for Use of Cyber and any changes neededfor inclusion of T10 forces.
- Work with T10 forces leadership to establish mutually agreeable Battle Rhythm and integration into ongoingoperations
- Coordinate with JAG / Cyber Legal personnel immediately should any Soldier become involved in actual orperceived illegal activities
End State¶
IR Team successfully integrates support from T10 forces in to Cyber mission operations.
Notes¶
The scope of this Task will vary by state
Manual Steps¶
Running Script¶
Dependencies¶
Other available tools¶
References¶
NIST Cyber Security Framework
NIST SP 800-61r2: Computer Security Incident Handling Guide