FBI CJIS Security Policy IR-3: IR-3 Incident Response Testing

Test the effectiveness of the incident response capability annually with tabletop or walk-through exercises, simulations or other agency-appropriate tests.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in IR: Incident Response – FBI CJIS Security Policy

IR-1 IR-1 Policy and Procedures
IR-2 IR-2 Incident Response Training
IR-2(3) IR-2(3) Incident Response Training | Breach
IR-3(2) IR-3(2) Incident Response Testing | Coordination with Related Plans
IR-4 IR-4 Incident Handling
IR-4(1) IR-4(1) Incident Handling | Automated Incident Handling Processes
IR-6 IR-6 Incident Reporting
IR-6(1) IR-6(1) Incident Reporting | Automated Reporting

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls