← CMMC Level 2
CMMC Level 2 / Control family · IR
Incident Response
That security incidents are detected, handled, reported, and learned from — with the capability tested.
3
requirements in this family
What it requires
The 3 requirements, in plain language.
3.6.1 Incident Handling
Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities
3.6.2 Incident Reporting
Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization
3.6.3 Incident Response Testing
Test the organizational incident response capability
NIST SP 800-171 Rev 2 — Family IR. CMMC Level 2 assesses each requirement's objectives via a C3PAO. NIST SP 800-171r2 →
How Aletheon covers it
One owner across the whole family — built, run, and proven.
Enclave builds these controls into the boundary as code; Cadence keeps them enforced between assessments; Attest proves them to the C3PAO against every objective.
See all fourteen families →Not sure which families your contract puts in scope?
A readiness check maps your environment to all 110 controls and tells you exactly where you stand.