N
|
controlIR-6

Incident Reporting (IR-6)

Require personnel to report suspected incidents to the organizational incident response capability within [organization-defined] ; and Report incident information to [organization-defined].

Security Baselines

LOWMODERATEHIGH
incident-responsedetectioncontainment

Why These Connect

Maps To20

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports13

These related controls work together — a change to one may affect the others.

Enhances3

These enhancements add specific capabilities or refinements to the base control.

Related Controls(8)

CP-2Contingency Plan (CP-2)
LMH
IR-4Incident Handling (IR-4)
LMH
IR-5Incident Monitoring (IR-5)
LMH
CM-6Configuration Settings (CM-6)
LMH
IR-8Incident Response Plan (IR-8)
LMH
IR-9Information Spillage Response (IR-9)IR-7Incident Response Assistance (IR-7)
LMH
SR-8Notification Agreements (SR-8)
LMH

Cross-Framework Mappings(20)

RS.MA-01RS.MA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.MA-02RS.MA-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.MA-03RS.MA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.MA-04RS.MA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.AN-06RS.AN-06Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.AN-07RS.AN-07Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.CO-02RS.CO-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.CO-03RS.CO-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RC.CO-03RC.CO-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ISO 27001ISO/IEC 27001:20222 mappingsFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
HIPAAHIPAA Security Rule5 mappingsFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
RS.MA-01RS.MA-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.MA-02RS.MA-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.MA-03RS.MA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.MA-04RS.MA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.AN-06RS.AN-06Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.AN-07RS.AN-07Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.CO-02RS.CO-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RS.CO-03RS.CO-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RC.CO-03RC.CO-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined time period
Assignmentorganization-defined authorities

Control Enhancements(3)

IR-6(1)Automated Reporting (IR-6(1))
MH
IR-6(2)Vulnerabilities Related to Incidents (IR-6(2))
IR-6(3)Supply Chain Coordination (IR-6(3))
MH

See Also

@SP 800-53 Overview⚖Compare Baselines