AC.L2-3.6.1[d] — Incident Response (Response)
Domain: IR | Practice: IR.L2-3.6.1 | Objective ID: 3.6.1[d] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 L2
Assessment Objective: An operational incident-handling capability is established that includes response.
Execute response actions to contain, eradicate, and recover from incidents. Response procedures ensure timely containment of CUI systems compromised or at risk. Under DFARS 252.204-7012, documented response procedures, communication plans, and evidence of testing are required for CMMC L2 assessments.
Tags: AC.L2-3.6.1[d], cmmc, level-2, domain-ir