When drawing up its active assailant plan the organization should: name the key people inside and outside, with alternates, and resources needed, such as the chief security officer or head of HR, the Threat Management Team, security staff, the incident commander and command structure, a crisis communications or public relations officer or consultant, a global security operations or dispatch center, a safety liaison and, where relevant, representatives of other tenants; define their responsibilities and authority (A.2.3); set up emergency management liaisons (A.2.4); prepare emergency response kits (A.2.5); set notification and communication strategies (A.2.6); follow the guidance on staging and operations areas (A.2.7); check and prove the plan (A.2.8); train response teams (A.2.9); give employees awareness training (A.2.10); and consider psychological (A.2.11) and legal (A.2.12) aspects.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.