BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

IR-04(02) Dynamic Reconfiguration

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded IR part of IR-4

Title

Dynamic Reconfiguration

Control

Include the following types of dynamic reconfiguration for [Assignment: system components] as part of the incident response capability: [Assignment: types of dynamic reconfiguration].

Discussion

Dynamic reconfiguration includes changes to router rules, access control lists, intrusion detection or prevention system parameters, and filter rules for guards or firewalls. Organizations may perform dynamic reconfiguration of systems to stop attacks, misdirect attackers, and isolate components of systems, thus limiting the extent of the damage from breaches or compromises. Organizations include specific time frames for achieving the reconfiguration of systems in the definition of the reconfiguration capability, considering the potential need for rapid response to effectively address cyber threats.

Parameters

ir-04.02_odp.01: types of dynamic reconfiguration
ir-04.02_odp.02: system components

Related controls

ac-2, ac-4, cm-2

Assessment objective

IR-04(02) [Assignment: types of dynamic reconfiguration] for [Assignment: system components] are included as part of the incident response capability.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).