{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Incident Management & Response"],"inherent_rating":"high","taxonomy":["iso-27005-vulnerability","nist-privacy-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Air-no-response-procedures","description":"Without documented, tested incident-response procedures, breaches and failures are handled inconsistently, slowly, or ineffectively, prolonging exposure and amplifying loss.","details":{"category":"cyber_security","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ir-no-response-procedures","taxonomies":["iso-27005-vulnerability","nist-privacy-risk"],"treatment":"mitigate"},"id":"risk:ir-no-response-procedures","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Air-no-response-procedures","sourceIds":["coso-ic","iso-27001","nist-800-53","nist-csf-2"],"sourceUrl":null,"title":"No or insufficient incident-response procedures","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:21f52a7b63a090bb9662aafb971b1de101c6939fba6c050130650bb4c165076f","properties":{"rationale":"The approved, distributed, periodically-reviewed IR plan is the documented response procedure whose absence defines the risk.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-01-e7711d29.json","sourceId":"uc:UC-IR-01","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2f720d99af1a9001fd82ffce346fd6d0d0005bb27fcd0b2eb56f3d5f314a31e9","properties":{"rationale":"Role-based training plus tabletop testing validates the procedures work and are executed, directly countering inconsistent, slow, or ineffective handling.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-02-70e2bdb3.json","sourceId":"uc:UC-IR-02","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:53c400d05fefaa8205385e76e7d91863d805eb1ea636cf29218a30b0a7acae83","properties":{"rationale":"Operating monitored reporting channels and support routes events promptly into triage, directly reducing slow/inconsistent incident handling at intake.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-03-477c1ef0.json","sourceId":"uc:UC-IR-03","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7a9ed82b78b92593ba2e35df42ddd1e931e7239c55b1217a1e239d67653b158a","properties":{"rationale":"Converting post-incident lessons into corrective actions improves procedures over time — a second-order feedback loop presupposing the base procedures, not the operative defense against their absence.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","sourceId":"uc:UC-IR-10","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:be2b2fe7f2eb6dae8e3680057e08a439df259ada2933b5eafe7ab233e03ef554","properties":{"rationale":"Improving IR/cyber plans after exercises and incidents is a second-order feedback loop presupposing the base procedures UC-IR-01/02 establish and test; it contributes but is not the operative defense against their absence.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-11-714d9672.json","sourceId":"uc:UC-ASSET-11","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f4247c5bc2f12bf3f2f2cbc55a22245d1b2457378c9648ea8c6c97461cf9536e","properties":{"rationale":"Triage, classification, prioritization, and threshold-based escalation directly make incident handling consistent, prioritized, and timely.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-04-6067c069.json","sourceId":"uc:UC-IR-04","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"}],"schemaVersion":1}