Skip to main content

πŸ’Ό IR-6 Incident Reporting (L)(M)(H)

  • Contextual name: πŸ’Ό IR-6 Incident Reporting (L)(M)(H)
  • ID: /frameworks/fedramp-high-security-controls/ir/06
  • Located in: πŸ’Ό Incident Response

Description​

a. Require personnel to report suspected incidents to the organizational incident response capability within [FedRAMP Assignment: US-CERT incident reporting timelines as specified in NIST Special Publication 800-61 (as amended)]; and

b. Report incident information to [Assignment: organization-defined authorities].

IR-6 Additional FedRAMP Requirements and Guidance:

Requirement: Reports security incident information according to FedRAMP Incident Communications Procedure.

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/ir/06
  • Internal
    • ID: dec-c-c04378a7

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό IR-6 Incident Reporting3

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP Low Security Controls β†’ πŸ’Ό IR-6 Incident Reporting (L)(M)(H)
πŸ’Ό FedRAMP Moderate Security Controls β†’ πŸ’Ό IR-6 Incident Reporting (L)(M)(H)212

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό IR-6(1) Automated Reporting (M)(H)810
πŸ’Ό IR-6(3) Supply Chain Coordination (M)(H)22