DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 6: Cyberspace defense and incident response – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 6.5.2-3: Incident reporting: categories, timelines, formats and the reporting mechanism to DoD

What does 6.5.2-3 require?

The CSP reports incidents affecting DoD data or the CSO to the mission owner, the mission owner's CSSP and the DoD cyber incident reporting channels (DC3 or USCYBERCOM via JFHQ-DoDIN as directed) using the DoD incident categories, the information requirements and the timelines set in the section (initial reports within the hour for the most serious categories, with follow-up and final reports), in the prescribed formats, through the designated reporting mechanism, and keeps reporting as the incident develops; all parties work together to investigate and respond.

Maintained by Gerard Blokdyk

Other controls in Section 6: Cyberspace defense and incident response – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 controls