NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI) 171A-03.06.03: Incident Response Testing

What else in your programme already covers this

This control maps to 15 controls across 12 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 2 controls

IR-3 Incident Response Testing
IR-3(2) Incident Response Testing | Coordination with Related Plans (IR-3(2))

FedRAMP Moderate · 2 controls

IR-3 Incident Response Testing
IR-3(2) Incident Response Testing | Coordination with Related Plans (IR-3(2))

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-ID.IM-01 Improvements are identified from evaluations
NIST-CSF-ID.IM-03 Improvements are identified from execution of operational processes, procedures, and activities

CIS Controls v8 · 1 control

CIS-17.7 Conduct Routine Incident Response Exercises

CMMC 2.0 · 1 control

IR.L2-3.6.3 Incident Response Testing

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-SEF-04 Incident Response Testing

HIPAA Security Rule · 1 control

164.308(a)(7)(ii)(D) Testing and Revision Procedures (Addressable)

ISO 22301:2019 · 1 control

8.5 Exercise programme

NIST SP 800-171 Rev 3 · 1 control

03.06.03 Incident Response Testing

NIST SP 800-53 Rev 5 · 1 control

NIST800-IR-3 IR-3 Incident Response Testing

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(7)(ii)(D) Testing and Revision Procedures (Addressable)

PCI DSS 4.0 · 1 control

12.10.2 12.10.2 Annual review and testing of the incident response plan

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.