AC.L2-3.6.2[c] — Incident Response (Incident Monitoring and Analysis)
Domain: IR | Practice: IR.L2-3.6.2 | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2
Assessment Objective: The organization's incident response capability is tested.
Conduct tabletop exercises, simulations, or incident drills to validate incident response procedures and team readiness on at least an annual basis.