NIST Cybersecurity Framework (CSF) 2.0 2.0

RS.AN

Incident Analysis

Retour
Ouvrir la source

Investigations are conducted to ensure effective response and support forensics and recovery activities

Citation RS.AN
Clé de plateforme arcate:compliance:requirements/nist-csf/2.0/RS.AN
Emplacement dans la source row 192 of sheet 'CSF 2.0'
Publié par NIST

Exigences filles

RS.AN-01

[Withdrawn: Incorporated into RS.MA-02]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-01

RS.AN-02

[Withdrawn: Incorporated into RS.MA-02, RS.MA-03, RS.MA-04]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-02

RS.AN-03

Analysis is performed to establish what has taken place during an incident and the root cause of the incident

arcate:compliance:requirements/nist-csf/2.0/RS.AN-03

RS.AN-04

[Withdrawn: Moved to RS.MA-03]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-04

RS.AN-05

[Withdrawn: Moved to ID.RA-08]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-05

RS.AN-06

Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved

arcate:compliance:requirements/nist-csf/2.0/RS.AN-06

RS.AN-07

Incident data and metadata are collected, and their integrity and provenance are preserved

arcate:compliance:requirements/nist-csf/2.0/RS.AN-07

RS.AN-08

An incident's magnitude is estimated and validated

arcate:compliance:requirements/nist-csf/2.0/RS.AN-08