Skip to main content

💼 IR-3 Incident Response Testing (M)(H)

  • Contextual name: 💼 IR-3 Incident Response Testing (M)(H)
  • ID: /frameworks/fedramp-moderate-security-controls/ir/03
  • Located in: 💼 Incident Response

Description​

Test the effectiveness of the incident response capability for the system [FedRAMP Assignment: functional, at least annually] using the following tests: [Assignment: organization-defined tests].

IR-3-2 Additional FedRAMP Requirements and Guidance:

Requirement: The service provider defines tests and/or exercises in accordance with NIST Special Publication 800-61 (as amended). Functional testing must occur prior to testing for initial authorization. Annual functional testing may be concurrent with required penetration tests (see CA-8). The service provider provides test plans to the JAB/AO annually. Test plans are approved and accepted by the JAB/AO prior to test commencing.

Similar​

  • Sections
    • /frameworks/fedramp-high-security-controls/ir/03
  • Internal
    • ID: dec-c-9166c6a3

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 IR-3 Incident Response Testing (M)(H)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 IR-3(2) Coordination with Related Plans (M)(H)