This objective requires your organization to identify and document the incident response (IR) process, including procedures for detecting, reporting, analyzing, and responding to cybersecurity incidents—especially those involving Controlled Unclassified Information (CUI).