AC.L2-3.6.3[b] — Incident Response (Incident Reporting)
Domain: IR | Practice: IR.L2-3.6.3 | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2
Assessment Objective: Incident response activities are logged, maintained, and available for review.
Maintain comprehensive incident logs and audit trails documenting all response activities, communications, remediation steps, and lessons learned for audit and compliance verification.