IR-6(1)

Requirement

Report incidents using [Assignment: organization-defined automated mechanisms].

Discussion

The recipients of incident reports are specified in IR-6b. Automated reporting mechanisms include email, posting on websites (with automatic updates), and automated incident response tools and programs.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing incident reporting; automated mechanisms supporting incident reporting; system design documentation; system configuration settings and associated documentation; incident response plan; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident reporting responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for incident reporting; automated mechanisms supporting and/or implementing the reporting of security incidents].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!