+IEC-CSO-FIR Final Incident Report
|
IEC-CSO-FIR Final Incident Report
Notification- FedRAMP via email – fedramp_security@fedramp.gov
- Agency Customers via varies – Follow agency-specific incident reporting procedures: varies by agency
- All Necessary Parties via update – Provider's Trust Center or USDA Connect: trust center
Class AProviders with Class A Certifications MUST responsibly notify all affected parties by providing a Final Incident Report once the incident has been resolved and recovery is complete, including final updates to all previously reported information. Timeframes by impact level| Level | Final Incident Report |
|---|
| 1 | 3 business days | | 2 | 3 business days | | 3 | 3 business days | | 4 | 3 business days | | 5 | 3 business days |
Artifacts- An Final Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.
Class BProviders with Class B Certifications MUST responsibly notify all affected parties by providing a Final Incident Report once the incident has been resolved and recovery is complete, including final updates to all previously reported information. Timeframes by impact level| Level | Final Incident Report |
|---|
| 1 | 3 business days | | 2 | 3 business days | | 3 | 3 business days | | 4 | 3 business days | | 5 | 3 business days |
Artifacts- An Final Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.
Class CProviders with Class C Certifications MUST responsibly notify all affected parties by providing a Final Incident Report once the incident has been resolved and recovery is complete, including final updates to all previously reported information. Timeframes by impact level| Level | Final Incident Report |
|---|
| 1 | 1 business day | | 2 | 1 business day | | 3 | 6 hours | | 4 | 6 hours | | 5 | 6 hours |
Artifacts- An Final Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.
Class DProviders with Class D Certifications MUST responsibly notify all affected parties by providing a Final Incident Report once the incident has been resolved and recovery is complete, including final updates to all previously reported information. Timeframes by impact level| Level | Final Incident Report |
|---|
| 1 | 24 hours | | 2 | 6 hours | | 3 | 3 hours | | 4 | 3 hours | | 5 | 3 hours |
Artifacts- An Final Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.
Schema: FedRAMP Incident Report (IEC-CSO-IIR / IEC-CSO-OIR / IEC-CSO-FIR) NIST SP 800-53 Rev. 5 controls: IR-5 Defined terms: All Affected Parties, Final Incident Report (FIR), Incident, Responsibly
1. Overview
1.1 References
1.2 Identified Requirements
1.3 Related Regulations
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
- FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.
DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.
|