IR-6(2): Vulnerabilities Related To Incidents

Control Family:

Incident Response

Parent Control:

IR-6: Incident Reporting

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.SC-5
RS.CO-2

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
IR-6(2): Vulnerabilities Related to Incidents

Control Statement

The organization reports information system vulnerabilities associated with reported security incidents to [Assignment: organization-defined personnel or roles].