IR - Incident Response

The IR family defines security and privacy controls for establishing, maintaining, and improving an organization's incident response capabilities. It includes requirements for incident response planning, detection, analysis, containment, eradication, recovery, and post-incident reporting to reduce impact and support continuous improvement.