| 💼 IR-1 Policy and Procedures | | | | |
| 💼 IR-2 Incident Response Training | 3 | | | |
| 💼 IR-2(1) Incident Response Training _ Simulated Events | | | | |
| 💼 IR-2(2) Incident Response Training _ Automated Training Environments | | | | |
| 💼 IR-2(3) Incident Response Training _ Breach | | | | |
| 💼 IR-3 Incident Response Testing | 3 | | | |
| 💼 IR-3(1) Incident Response Testing _ Automated Testing | | | | |
| 💼 IR-3(2) Incident Response Testing _ Coordination with Related Plans | | | | |
| 💼 IR-3(3) Incident Response Testing _ Continuous Improvement | | | | |
| 💼 IR-4 Incident Handling | 15 | | | |
| 💼 IR-4(1) Incident Handling _ Automated Incident Handling Processes | | | | |
| 💼 IR-4(2) Incident Handling _ Dynamic Reconfiguration | | | | |
| 💼 IR-4(3) Incident Handling _ Continuity of Operations | | | | |
| 💼 IR-4(4) Incident Handling _ Information Correlation | | | | |
| 💼 IR-4(5) Incident Handling _ Automatic Disabling of System | | | | |
| 💼 IR-4(6) Incident Handling _ Insider Threats | | | | |
| 💼 IR-4(7) Incident Handling _ Insider Threats — Intra-organization Coordination | | | | |
| 💼 IR-4(8) Incident Handling _ Correlation with External Organizations | | | | |
| 💼 IR-4(9) Incident Handling _ Dynamic Response Capability | | | | |
| 💼 IR-4(10) Incident Handling _ Supply Chain Coordination | | | | |
| 💼 IR-4(11) Incident Handling _ Integrated Incident Response Team | | | | |
| 💼 IR-4(12) Incident Handling _ Malicious Code and Forensic Analysis | | | | |
| 💼 IR-4(13) Incident Handling _ Behavior Analysis | | | | |
| 💼 IR-4(14) Incident Handling _ Security Operations Center | | | | |
| 💼 IR-4(15) Incident Handling _ Public Relations and Reputation Repair | | | | |
| 💼 IR-5 Incident Monitoring | 1 | | | |
| 💼 IR-5(1) Incident Monitoring _ Automated Tracking, Data Collection, and Analysis | | | | |
| 💼 IR-6 Incident Reporting | 3 | | | |
| 💼 IR-6(1) Incident Reporting _ Automated Reporting | | | | |
| 💼 IR-6(2) Incident Reporting _ Vulnerabilities Related to Incidents | | | | |
| 💼 IR-6(3) Incident Reporting _ Supply Chain Coordination | | | | |
| 💼 IR-7 Incident Response Assistance | 2 | | | |
| 💼 IR-7(1) Incident Response Assistance _ Automation Support for Availability of Information and Support | | | | |
| 💼 IR-7(2) Incident Response Assistance _ Coordination with External Providers | | | | |
| 💼 IR-8 Incident Response Plan | 1 | | | |
| 💼 IR-8(1) Incident Response Plan _ Breaches | | | | |
| 💼 IR-9 Information Spillage Response | 4 | | | |
| 💼 IR-9(1) Information Spillage Response _ Responsible Personnel | | | | |
| 💼 IR-9(2) Information Spillage Response _ Training | | | | |
| 💼 IR-9(3) Information Spillage Response _ Post-spill Operations | | | | |
| 💼 IR-9(4) Information Spillage Response _ Exposure to Unauthorized Personnel | | | | |
| 💼 IR-10 Integrated Information Security Analysis Team | | | | |