IR - Incident Response (Level 2)

The l2_ir entry in the Cybersecurity Maturity Model Certification 2.0 defines the Incident Response practices required at Level 2. Organizations must establish documented procedures for detecting, reporting, analyzing, and responding to cyber incidents, maintain incident logs, and coordinate appropriate actions with relevant stakeholders and authorities within prescribed timeframes.