CMMC User Group - IR (Incident Response)


Description


CMMC User Group - IR (Incident Response) & MA (Maintenance) is focused on discussing the best practices, protocols, and strategies related to incident response and system maintenance required for compliance with the Cybersecurity Maturity Model Certification (CMMC). This group provides a platform for sharing insights, experiences, and resources related to maintaining security posture and effectively responding to security incidents. Participants can engage in discussions about tools, techniques, and frameworks that align with CMMC requirements, and collaborate on developing robust incident response plans and maintenance procedures to safeguard sensitive information. The collective knowledge within the group aims to enhance overall cybersecurity resilience among its members.
Content
  • CMMC User Group - IR (Incident Response)
  • Instructor Information
  • Incident Response (IR) Overview
  • Incident Response (IR) Requirements
  • IR.L2-3.6.1 – Incident Handling - Scenario: Ransomware Attack on SecurePro, Inc.
  • IR.L2-3.6.1 – Incident Handling - Assessment of Controls
  • IR.L2-3.6.1 – Incident Handling - Common Pitfalls 
  • Quiz Questions
  • Incident Response Plan (IRP) for SecurePro, Inc.
  • Root Cause Analysis (RCA) Template
  • After Action Report (AAR) Template
  • IR Playbook: Vendor Misconfiguration Breach Involving CUI
  • IR Playbook: Critical System Misconfiguration Breach Involving CUI
  • IR.L2-3.6.2 – Incident Reporting - Scenario: Data Leak at CyberSecure Solutions
  • IR.L2-3.6.2 – Incident Reporting - Assessment of Controls
  • IR.L2-3.6.2 – Incident Reporting - Common Pitfalls 
  • Quiz Questions
  • Incident Reporting Template for Subcontractors
  • IR.L2-3.6.3 – Incident Response Testing 
  • IR.L2-3.6.3 – Incident Response Testing - Assessment of Controls 
  • IR.L2-3.6.3 – Incident Response Testing - Common Pitfalls  
  • IR.L2-3.6.3 – Incident Response Testing
  • Tabletop Testing Scenario Template
  • IR Handling, Reporting, & Testing 
  • IR Handling, Reporting, & Testing 
  • IR Handling, Reporting, & Testing
  • IR Handling, Reporting, & Testing - Common Pitfalls 
  • CMMC User Group - IR (Incident Response) 
Completion rules
  • All units must be completed