03.07.02 - Incident Reporting

The ir_l_02 control in NIST SP 800-171 Rev 3 requires organizations to establish and maintain procedures for promptly reporting any suspected or actual incidents involving Controlled Unclassified Information. Reporting must be documented, include relevant details, and be communicated to designated authorities in a timely manner to support incident response and mitigation. This ensures that CUI breaches are identified, recorded, and addressed according to federal guidelines.