AC.L2-3.6.1[e] — Incident Response (Incident Handling)
Domain: IR | Practice: IR.L2-3.6.1 | Objective ID: 3.6.1[e] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2
Assessment Objective: An operational incident-handling capability is established that includes recovery.
Establish recovery procedures to restore systems and data to a known-good state after containment, including backup restoration, system rebuilding, and validation.