IR.2.092 Incident Preparation (CMMC Level 2)

Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities ...

CA.2.158 Ongoing Security Assessment (CMMC Level 2)

Periodically assess the security controls in organizational systems to determine if the controls are effective in their application ...