CMMC Practice IR.2.094: Analyze and triage events to support event resolution and incident declaration.
CMMC CLARIFICATION (Ref CMMC – Appendix B)
Analyze events to determine what to do. Categorize, prioritize, or group events to determine how to handle the event. You can take different actions in response to an event:
- declare an incident from the event;
- escalate it to someone outside the organization; and
- close the event because it does not have a large consequence on the organization.