The organization responds to information spills by: IR-9a.
Identifying the specific information involved in the information system contamination; IR-9b.
Alerting Assignment: organization-defined personnel or roles of the information spill using a method of communication not associated with the spill; IR-9c.
Isolating the contaminated information system or system component; IR-9d.
Eradicating the information from the contaminated information system or component; IR-9e.
Identifying other information systems or system components that may have been subsequently contaminated; and IR-9f.
Performing other Assignment: organization-defined actions.