CMMC 1.0 Practice - IR.2.092
Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities.
CMMC 1.0 Practice - IR.2.093
Detect and report events.
CMMC 1.0 Practice - IR.2.094
Analyze and triage events to support event resolution and incident declaration.
CMMC 1.0 Practice - IR.2.096
Develop and implement responses to declared incidents according to predefined procedures.
CMMC 1.0 Practice - IR.2.097
Perform root cause analysis on incidents to determine underlying causes.
CMMC 1.0 Practice - IR.3.098
Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization.
CMMC 1.0 Practice - IR.3.099
Test the organizational incident response capability.