unified
UC-IR-11 — Respond to information spillage with defined procedures
Maintain and execute a documented procedure for responding to information spillage — sensitive or regulated information landing on systems not authorized to hold it. On discovery, identify the information and the extent of contamination, alert designated personnel without amplifying exposure, isolate and eradicate the spilled information from affected systems and backups, and assess any obligations triggered by the exposure. Provide procedures and training for personnel exposed to spilled information and document each spill response.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Incident Management & Response
- type
- corrective
- category
- administrative
Details
- unified_id
- UC-IR-11
- title
- Respond to information spillage with defined procedures
- statement
- Maintain and execute a documented procedure for responding to information spillage — sensitive or regulated information landing on systems not authorized to hold it. On discovery, identify the information and the extent of contamination, alert designated personnel without amplifying exposure, isolate and eradicate the spilled information from affected systems and backups, and assess any obligations triggered by the exposure. Provide procedures and training for personnel exposed to spilled information and document each spill response.
- domain
- Incident Management & Response
- control_type
- corrective
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- IR-9
- coverage
- full
- relationship
- equal
- guidance
Source
No record-specific source URL is provided.
Connections
- Incident Reporting Channels & Spillage Response operates UC-IR-11 — Respond to information spillage with defined procedures
- UC-IR-11 — Respond to information spillage with defined procedures maps_to IR-9 — Information Spillage Response
- framework
- nist-800-53
- control_id
- IR-9
- coverage
- full
- relationship
- equal
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-IR-11 — Respond to information spillage with defined procedures mitigates Failure to detect, assess, and notify breaches on time
- strength
- related
- rationale
- Assessing obligations triggered by the spill determines regulatory notification duties for the exposed regulated data.
- UC-IR-11 — Respond to information spillage with defined procedures mitigates Unauthorized disclosure / breach of sensitive information
- strength
- primary
- rationale
- Isolating and eradicating spilled sensitive/regulated information from systems and backups directly reduces the extent of unauthorized disclosure (spillage named in the risk).