Incident Response (IR)
Level 3
Establish and maintain a security operations center capability that operates 24/7, with allowance for remote/on-call staff.
