IR-4 (2) IR-4 (2) CCI-000826 blank blank blank The organization NIST has not conducting the allocated this AP. inspection/assessment Therefore, this AP is obtains and examines the not applicable. incident response plan and verifies it has procedures addressing dynamic reconfiguration of information system components defined in IR-4 (2), CCI 2781 as part of the incident response capability IAW CM-3. IR-4 (2) IR-4 (2) CCI-002781 blank blank blank The organization NIST has not conducting the allocated this AP. inspection/assessment Therefore, this AP is obtains and examines the not applicable. documented information system components to ensure the organization being inspected/assessed defines the information system components for dynamic reconfiguration as part of the incident response capability. IR-4 (3) IR-4 (3) CCI-000827 High High High CJCSM 6510.01B has Automatically Moderate Moderate Moderate already identified DoD's compliant with this classes of incidents. CCI because they are covered at the DoD The organization being level inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the classes of incidents as classes of incidents defined in CJCSM 6510.01B Appendix A- Enclosure B.6510.01M IR-4 (3) IR-4 (3) CCI-000828 High High High CJCSM 6510.01B has Automatically Moderate Moderate Moderate already identified DoD's compliant with this actions to take in response CCI because they are to classes of incidents. covered at the DoD level The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the actions as actions defined in CJCSM 6510.01B.
IR-4 (2) IR-4 (2) CCI-000826 blank blank blank The organization conducting the inspection/assessment obtains and examines the incident response plan and verifies it has procedures addressing dynamic reconfiguration of information system components defined in IR-4 (2), CCI 2781 as part of the incident response capability IAW CM-3. NIST has not allocated this AP. Therefore, this AP is not applicable. IR-4 (2) IR-4 (2) CCI-002781 blank blank blank The organization conducting the inspection/assessment obtains and examines the documented information system components to ensure the organization being inspected/assessed defines the information system components for dynamic reconfiguration as part of the incident response capability. NIST has not allocated this AP. Therefore, this AP is not applicable. IR-4 (3) IR-4 (3) CCI-000827 High Moderate High Moderate High Moderate CJCSM 6510.01B has already identified DoD's classes of incidents. The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the classes of incidents as classes of incidents defined in CJCSM 6510.01B Appendix A- Enclosure B.6510.01M Automatically compliant with this CCI because they are covered at the DoD level IR-4 (3) IR-4 (3) CCI-000828 High Moderate High Moderate High Moderate CJCSM 6510.01B has already identified DoD's actions to take in response to classes of incidents. The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the actions as actions defined in CJCSM 6510.01B. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Incident-Response-Plan.docx