5.1.2.4

Incident Response Plan – Cyber Security Insurance

The organization should consider purchasing a cyber security insurance policy that includes coverage for incident response and recovery activities or provide rationale for not purchasing one.