CMMC 1.0 Practice - IR.2.092

Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities.

CMMC 1.0 Practice - IR.2.093

Detect and report events.

CMMC 1.0 Practice - IR.2.094

Analyze and triage events to support event resolution and incident declaration.

CMMC 1.0 Practice - IR.2.096

Develop and implement responses to declared incidents according to predefined procedures.

CMMC 1.0 Practice - IR.2.097

Perform root cause analysis on incidents to determine underlying causes.

CMMC 1.0 Practice - IR.3.098

Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization.

CMMC 1.0 Practice - IR.3.099

Test the organizational incident response capability.