Physical system location(s) (e.g. Washington DC, Los Angeles, CA) Sources, methods, or tools used to identify the incident (e.g. Intrusion Detection System or audit log analysis) Any additional information relevant to the incident and not included above. DoD guidance: For CSOs that are multi-tenant or otherwise shared across Federal Agencies outside of the DoD, incidents will be reported to US-CERT as required by FedRAMP, in parallel with reporting to DoD. For CSOs providing dedicated infrastructure to the DoD, incidents regarding that infrastructure and CSOs will not be reported to US-CERT, but directly to the DoD. The DoD Tier 1 (USCYBERCOM/JFHQ DoDIN) will handle coordination with US-CERT and other entities as appropriate. IR-6 Control Summary Information Responsible Role: Parameter: Implementation Status (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned Alternative implementation - equivalence (explain below) Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> IR-6 What is the solution and how is it implemented? Part a Part b
Physical system location(s) (e.g. Washington DC, Los Angeles, CA) Sources, methods, or tools used to identify the incident (e.g. Intrusion Detection System or audit log analysis) Any additional information relevant to the incident and not included above. DoD guidance: For CSOs that are multi-tenant or otherwise shared across Federal Agencies outside of the DoD, incidents will be reported to US-CERT as required by FedRAMP, in parallel with reporting to DoD. For CSOs providing dedicated infrastructure to the DoD, incidents regarding that infrastructure and CSOs will not be reported to US-CERT, but directly to the DoD. The DoD Tier 1 (USCYBERCOM/JFHQ DoDIN) will handle coordination with US-CERT and other entities as appropriate. IR-6 Control Summary Information Responsible Role: Parameter: Implementation Status (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned Alternative implementation - equivalence (explain below) Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> IR-6 What is the solution and how is it implemented? Part a Part b