🚨 IR — Incident Response
Establish incident handling capability and respond to incidents
← Back to all domains3 Practices
L2 IR.L2-3.6.1
Establish an operational incident-handling capability
This CMMC practice requires organizations to create a structured process for detecting, analyzing, and responding to cybersecurity incidents. It invol...
Level 2 — Advanced
View Control →
L2 IR.L2-3.6.2
Track, document, and report incidents to designated officials
This practice requires organizations to systematically track, document, and report security incidents to designated officials. It ensures that inciden...
Level 2 — Advanced
View Control →
L2 IR.L2-3.6.3
Test the organizational incident response capability
This practice requires organizations to regularly test their incident response plan to ensure it works effectively during a real security incident. Th...
Level 2 — Advanced
View Control →