its confidentiality and integrity. IR-5(1) Control Summary Information Responsible Role: Implementation Type (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned Alternative implementation - equivalence (explain below) Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) IR-5(1) What is the solution and how is it implemented? IR-6(2) - Incident Reporting | Vulnerabilities Related to Incidents The organization reports information system vulnerabilities associated with reported security incidents to [DoD Assignment: the AOs who issued the PA and the customer’s ATO, the customer’s MCD, the CIRT/CERT (such as US-CERT, DoD CERT, IC CERT).]
its confidentiality and integrity. IR-5(1) Control Summary Information Responsible Role: Implementation Type (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned Alternative implementation - equivalence (explain below) Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) IR-5(1) What is the solution and how is it implemented? IR-6(2) - Incident Reporting | Vulnerabilities Related to Incidents The organization reports information system vulnerabilities associated with reported security incidents to [DoD Assignment: the AOs who issued the PA and the customer’s ATO, the customer’s MCD, the CIRT/CERT (such as US-CERT, DoD CERT, IC CERT).]