Incident Response (IR)
The Incident Response family has 9 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.
| Control | Title | Low | Moderate | High | Privacy |
|---|---|---|---|---|---|
| IR-1 | Policy and Procedures | Yes | Yes | Yes | Yes |
| IR-2 | Incident Response Training | Yes | Yes | Yes | Yes |
| IR-3 | Incident Response Testing | Yes | Yes | Yes | |
| IR-4 | Incident Handling | Yes | Yes | Yes | Yes |
| IR-5 | Incident Monitoring | Yes | Yes | Yes | Yes |
| IR-6 | Incident Reporting | Yes | Yes | Yes | Yes |
| IR-7 | Incident Response Assistance | Yes | Yes | Yes | Yes |
| IR-8 | Incident Response Plan | Yes | Yes | Yes | Yes |
| IR-9 | Information Spillage Response |
Withdrawn controls: IR-10.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.