YouTube - CMMC 2.0 Control IR.L2-3.6.3 - Test the organizational incident response capability
In this video, Mike breaks down CMMC 2.0 Control IR.L2-3.6.3. Hot on the heels of the requirement to have an incident response plan or similar instrument that defines how information security incidents will be handled and responded to is this control which mandates that you actually test it!