controlIR-6

Incident Reporting (IR-6)

Require personnel to report suspected incidents to the organizational incident response capability within [organization-defined] ; and Report incident information to [organization-defined].

Security Baselines

LOWMODERATEHIGH

incident-responsedetectioncontainment

Why These Connect

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports13

These related controls work together — a change to one may affect the others.

Enhances3

These enhancements add specific capabilities or refinements to the base control.

Related Controls(8)

CP-2Contingency Plan (CP-2)

LMH

IR-4Incident Handling (IR-4)

LMH

IR-5Incident Monitoring (IR-5)

LMH

CM-6Configuration Settings (CM-6)

LMH

IR-8Incident Response Plan (IR-8)

LMH

IR-9Information Spillage Response (IR-9)IR-7Incident Response Assistance (IR-7)

LMH

SR-8Notification Agreements (SR-8)

LMH

Control Enhancements(3)

IR-6(1)Automated Reporting (IR-6(1))

IR-6(2)Vulnerabilities Related to Incidents (IR-6(2))

IR-6(3)Supply Chain Coordination (IR-6(3))