Skip to main content

💼 IR-6 Incident Reporting (L)(M)(H)

  • Contextual name: 💼 IR-6 Incident Reporting (L)(M)(H)
  • ID: /frameworks/fedramp-high-security-controls/ir/06
  • Located in: 💼 Incident Response

Description

a. Require personnel to report suspected incidents to the organizational incident response capability within [FedRAMP Assignment: US-CERT incident reporting timelines as specified in NIST Special Publication 800-61 (as amended)]; and

b. Report incident information to [Assignment: organization-defined authorities].

IR-6 Additional FedRAMP Requirements and Guidance:

Requirement: Reports security incident information according to FedRAMP Incident Communications Procedure.

Similar

  • Sections
    • /frameworks/nist-sp-800-53-r5/ir/06
  • Internal
    • ID: dec-c-c04378a7

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST SP 800-53 Revision 5 → 💼 IR-6 Incident Reporting31

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP Low Security Controls → 💼 IR-6 Incident Reporting (L)(M)(H)1
💼 FedRAMP Moderate Security Controls → 💼 IR-6 Incident Reporting (L)(M)(H)213

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags
💼 IR-6(1) Automated Reporting (M)(H)810
💼 IR-6(3) Supply Chain Coordination (M)(H)22

Policies (1)

PolicyLogic CountFlags
📝 Google Organization Essential Contacts is not configured 🟢1🟢 x6