N
|
controlIR-3

Incident Response Testing (IR-3)

Test the effectiveness of the incident response capability for the system [organization-defined] using the following tests: [organization-defined].

Security Baselines

MODERATEHIGHLOW
incident-responsedetectioncontainment

Why These Connect

Maps To3

These are equivalent or closely aligned requirements in other frameworks.

Baselined In2

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports8

These related controls work together — a change to one may affect the others.

Enhances3

These enhancements add specific capabilities or refinements to the base control.

Related Controls(6)

CP-4Contingency Plan Testing (CP-4)
LMH
IR-2Incident Response Training (IR-2)
LMH
CP-3Contingency Training (CP-3)
LMH
IR-4Incident Handling (IR-4)
LMH
IR-8Incident Response Plan (IR-8)
LMH
PM-14Testing, Training, and Monitoring (PM-14)

Cross-Framework Mappings(3)

ID.IM-02ID.IM-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
HIPAAHIPAA Security Rule1 mappingFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
ID.IM-02ID.IM-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined frequency
Assignmentorganization-defined tests

Control Enhancements(3)

IR-3(1)Automated Testing (IR-3(1))
IR-3(2)Coordination with Related Plans (IR-3(2))
MH
IR-3(3)Continuous Improvement (IR-3(3))

See Also

@SP 800-53 Overview⚖Compare Baselines