# IEC-CSO-IIR — Initial Incident Report

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/iec-cso-iir

Incident Evaluation and Communication (`IEC`) · group all · subset CSO
Force: none stated

## Statement

_No statement text is recorded for this requirement._

## Who it binds

- Providers

## Certification classes

- class A
- class B
- class C
- class D

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

FedRAMP Incident Report (IEC-CSO-IIR / IEC-CSO-OIR / IEC-CSO-FIR) — https://fedramp.gov/schemas/fedramp-incident-report-schema-2026-06-24.json

## Artifacts

- {"text":"An Initial Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.","scope":"all","class":"a","source":"requirement"}
- {"text":"An Initial Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.","scope":"all","class":"b","source":"requirement"}
- {"text":"An Initial Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.","scope":"all","class":"c","source":"requirement"}
- {"text":"An Initial Incident Report for one or more incidents. The report can be from real incidents, simulated incidents, or a combination of sources.","scope":"all","class":"d","source":"requirement"}

## Timeframes

_This requirement states no deadline._

## Notifications

- {"requirementId":"IEC-CSO-IIR","documentKey":"IEC","requirementName":"Initial Incident Report","party":"FedRAMP","method":"email","target":"fedramp_security@fedramp.gov","name":"fedramp_security@fedramp.gov"}
- {"requirementId":"IEC-CSO-IIR","documentKey":"IEC","requirementName":"Initial Incident Report","party":"Agency Customers","method":"varies","target":"varies by agency","name":"Follow agency-specific incident reporting procedures"}
- {"requirementId":"IEC-CSO-IIR","documentKey":"IEC","requirementName":"Initial Incident Report","party":"All Necessary Parties","method":"update","target":"trust center","name":"Provider's Trust Center or USDA Connect"}