AC.L2-3.6.2[a] — Incident Response (Incident Monitoring and Analysis)
Domain: IR | Practice: IR.L2-3.6.2 | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2
Assessment Objective: Incident data is collected, monitored, and analyzed.
Establish logging and monitoring mechanisms to collect incident data across all systems handling CUI and maintain audit trails for analysis and validation.