Initial Incident Report (IIR)
Also: initial incident report, initial incident reports, IIR, IIRs
Definition
Verbatim from FedRAMP/rules
An initial report about an incident that is supplied by FedRAMP Certified cloud service providers to FedRAMP and agency customers, following FedRAMP FedRAMP Incident Evaluation and Communication rules.
Used in 6 rule requirements
This term is a defined part of the following FedRAMP rule requirements — when it appears in a rule, this definition applies precisely.
Change history
2026-07-02Update terminology from "Response" to "Communication" in FedRAMP Incident Evaluation rules.2026-06-24Official launch of the FedRAMP Consolidated Rules for 2026.