{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Incident Management & Response","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-IR-02","description":"Provide role-based incident response training to users, responders, and leadership within a defined period of assuming the role, when systems or the plan change materially, and at least annually thereafter. Test the incident response capability on a defined schedule using exercises such as tabletop simulations, document results and lessons, and feed identified gaps back into the plan and the training program.","details":{"control_category":"administrative","control_type":"preventive","domain":"Incident Management & Response","guidance":[],"members":[{"control_id":"IR-2","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"IR-3","coverage":"full","framework":"nist-800-53","relationship":"superset_of"}],"statement":"Provide role-based incident response training to users, responders, and leadership within a defined period of assuming the role, when systems or the plan change materially, and at least annually thereafter. Test the incident response capability on a defined schedule using exercises such as tabletop simulations, document results and lessons, and feed identified gaps back into the plan and the training program.","title":"Train responders and test the incident response capability","unified_id":"UC-IR-02"},"id":"uc:UC-IR-02","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-IR-02","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"UC-IR-02 — Train responders and test the incident response capability","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2f720d99af1a9001fd82ffce346fd6d0d0005bb27fcd0b2eb56f3d5f314a31e9","properties":{"rationale":"Role-based training plus tabletop testing validates the procedures work and are executed, directly countering inconsistent, slow, or ineffective handling.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-02-70e2bdb3.json","sourceId":"uc:UC-IR-02","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5b538b6c620e0e9d50744e6c1f942fb6df5485aaa0ecd95759cd643aba02538c","properties":{"control_id":"IR-3","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-02-70e2bdb3.json","sourceId":"uc:UC-IR-02","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ir-3-c8c76637.json","targetId":"ctrl:nist-800-53:IR-3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5d1da3bbabfdfb12ae952827d1eef946882f92760f56ed958b8c61fb6019953f","properties":{},"sourceDetailPath":"/data/v1/records/wf-c57-d3460b57.json","sourceId":"wf:C57","targetDetailPath":"/data/v1/records/uc-uc-ir-02-70e2bdb3.json","targetId":"uc:UC-IR-02","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6f1b552bb72d0cac2e270e1c602f1e2e531838574ecc7aa3fa26db82376aa860","properties":{"control_id":"IR-2","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-02-70e2bdb3.json","sourceId":"uc:UC-IR-02","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ir-2-3f34354d.json","targetId":"ctrl:nist-800-53:IR-2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:74dc0ab25f44469d86fa0b9cf09964c17bcea3564607057ae5cb2b65d08e7634","properties":{},"sourceDetailPath":"/data/v1/records/wf-c9-75fb1752.json","sourceId":"wf:C9","targetDetailPath":"/data/v1/records/uc-uc-ir-02-70e2bdb3.json","targetId":"uc:UC-IR-02","type":"tests"}],"schemaVersion":1}