Situational awareness reporting requirements have been defined and address timely dissemination of cybersecurity information to organization-defined stakeholders

Situational awareness reporting requirements should define the development, delivery, and maintenance of situational awareness communications needed for each type of stakeholder. For example, situational awareness communications to law enforcement will differ significantly from those to the board of directors. The plan should address near-term development and delivery and should be adjusted with some regularity in response to new or changing needs and from the assessment of the effectiveness of communications activities. These are examples of stakeholders for situational awareness reporting: · organizational leaders · cybersecurity program leadership and team members · individuals across the organization for whom a cybersecurity incident would have an impact · information sharing and analysis centers · government entities · law enforcement · connected organizations · vendors · sector organizations (such as trade associations) · regulators

These are examples of situational awareness reporting requirements: · the frequency and timing of communications · special controls over communications (e.g., encryption or secured communications) that are appropriate for some stakeholders · resources that will be required · internal and external resources that are involved in supporting the communications process · internal and external points of contact by role · communication methods and channels to be used · The assets, people, and systems (including external systems such as cellular networks) that may be unavailable during response and what backup resources may be needed

Related Practices · Information Sharing: This practice is part of a group of cross-domain practices that enable information sharing with organizational stakeholders. These include: THREAT-1i, THREAT-2h, THREAT-2k, RISK-1c1d, SITUATION-3a, SITUATION-3c, SITUATION-3d, SITUATION-3e, RESPONSE-2g, RESPONSE-3c, RESPONSE-3f.