ComplianceNIST 800-53 control
NIST-IR-6 Incident Reporting
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- IR Incident Response
- Control
- IR-6
Control statement
a. Require personnel to report suspected incidents to the organizational incident response capability within [Assignment: time period] ; and
b. Report incident information to [Assignment: authorities].
Discussion
The types of incidents reported, the content and timeliness of the reports, and the designated reporting authorities reflect applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Incident information can inform risk assessments, control effectiveness assessments, security requirements for acquisitions, and selection criteria for technology products.
Related
Related control · Compliance (6)
- NIST-CM-6 Configuration Settings NIST 800-53 control
- NIST-CP-2 Contingency Plan NIST 800-53 control
- NIST-IR-4 Incident Handling NIST 800-53 control
- NIST-IR-5 Incident Monitoring NIST 800-53 control
- NIST-IR-8 Incident Response Plan NIST 800-53 control
- NIST-IR-9 Information Spillage Response NIST 800-53 control
Referenced by Compliance · enhancement of (3)
- NIST-IR-6(1) Automated Reporting NIST 800-53 enhancement
- NIST-IR-6(2) Vulnerabilities Related to Incidents NIST 800-53 enhancement
- NIST-IR-6(3) Supply Chain Coordination NIST 800-53 enhancement
Referenced by Compliance · has member (1)
- NIST-IR Incident Response NIST 800-53 family
Referenced by Compliance · related control (8)
- NIST-CM-6(2) Respond to Unauthorized Changes NIST 800-53 enhancement
- NIST-CP-2 Contingency Plan NIST 800-53 control
- NIST-IR-4 Incident Handling NIST 800-53 control
- NIST-IR-5 Incident Monitoring NIST 800-53 control
- NIST-IR-7 Incident Response Assistance NIST 800-53 control
- NIST-IR-9 Information Spillage Response NIST 800-53 control
- NIST-SI-2(7) Root Cause Analysis NIST 800-53 enhancement
- NIST-SR-8 Notification Agreements NIST 800-53 control