// Level 3 · Controls
Incident Response
Establish operational incident-handling capability.
3.6.1High
Incident Handling Capability
Establish an operational incident-handling capability including preparation, detection, analysis, containment, recovery, and response.
3.6.2High
Incident Reporting
Track, document, and report incidents to designated officials and authorities.
3.6.3Medium
Incident Response Testing
Test the organizational incident response capability.