# IR-7 — Incident Response Assistance

- **Control ID:** IR-7
- **Family:** [IR](/md/families/IR.md)
- **Baselines:** low, moderate, high
- **Enhancement of:** No content available.

## Description

Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.

## Discussion

Incident response support resources provided by organizations include help desks, assistance groups, automated ticketing systems to open and track incident response tickets, and access to forensics services or consumer redress services, when required.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

- [RS.CO-02](/md/csf/RS.CO-02.md) — Internal and external stakeholders are notified of incidents
- [RS.CO-03](/md/csf/RS.CO-03.md) — Information is shared with designated internal and external stakeholders
- [RS.MA-01](/md/csf/RS.MA-01.md) — The incident response plan is executed in coordination with relevant third parties once an incident is declared
- [RS.MA-04](/md/csf/RS.MA-04.md) — Incidents are escalated or elevated as needed

## Related controls

- [AT-2](/md/controls/AT-2.md)
- [AT-3](/md/controls/AT-3.md)
- [IR-4](/md/controls/IR-4.md)
- [IR-6](/md/controls/IR-6.md)
- [IR-8](/md/controls/IR-8.md)
- [PM-22](/md/controls/PM-22.md)
- [PM-26](/md/controls/PM-26.md)
- [SA-9](/md/controls/SA-9.md)
- [SI-18](/md/controls/SI-18.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.