Advance planning, training and simulation exercises are essential to an effective response. Response plans should consider: the main kinds of incident, from aggressive posturing without contact, through physical aggression that injures (hitting with an open hand or fist, pushing, kicking, grappling), to weapons either conventional or improvised, fire or explosive devices, and an active assailant; single or multiple attackers; what is expected of employees in responding; policies on how it will lessen or contain the danger to people face to face with an active assailant so that nobody is hurt or killed; joint planning with first and emergency responders, such as giving them floor plans and site access and space for command posts; training employees, contractor staff and frequent visitors to stay physically safe while an incident unfolds; and the further measures in 8.9.2.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.