NIST Cybersecurity Framework (CSF) 2.0

DE.AE-05

[Withdrawn: Moved to DE.AE-08]

arcate:compliance:requirements/nist-csf/2.0/DE.AE-05 · row 174 of sheet 'CSF 2.0'

DE.AE-06

Information on adverse events is provided to authorized staff and tools

arcate:compliance:requirements/nist-csf/2.0/DE.AE-06 · row 175 of sheet 'CSF 2.0'

DE.AE-07

Cyber threat intelligence and other contextual information are integrated into the analysis

arcate:compliance:requirements/nist-csf/2.0/DE.AE-07 · row 176 of sheet 'CSF 2.0'

DE.AE-08

Incidents are declared when adverse events meet the defined incident criteria

arcate:compliance:requirements/nist-csf/2.0/DE.AE-08 · row 177 of sheet 'CSF 2.0'

DE.DP — Detection Processes

[Withdrawn: Incorporated into other Categories and Functions]

arcate:compliance:requirements/nist-csf/2.0/DE.DP · row 178 of sheet 'CSF 2.0'

DE.DP-01

[Withdrawn: Incorporated into GV.RR-02]

arcate:compliance:requirements/nist-csf/2.0/DE.DP-01 · row 179 of sheet 'CSF 2.0'

DE.DP-02

[Withdrawn: Incorporated into DE.AE]

arcate:compliance:requirements/nist-csf/2.0/DE.DP-02 · row 180 of sheet 'CSF 2.0'

DE.DP-03

[Withdrawn: Incorporated into ID.IM-02]

arcate:compliance:requirements/nist-csf/2.0/DE.DP-03 · row 181 of sheet 'CSF 2.0'

DE.DP-04

[Withdrawn: Incorporated into DE.AE-06]

arcate:compliance:requirements/nist-csf/2.0/DE.DP-04 · row 182 of sheet 'CSF 2.0'

DE.DP-05

[Withdrawn: Incorporated into ID.IM, ID.IM-03]

arcate:compliance:requirements/nist-csf/2.0/DE.DP-05 · row 183 of sheet 'CSF 2.0'

RS — RESPOND

Actions regarding a detected cybersecurity incident are taken

arcate:compliance:requirements/nist-csf/2.0/RS · row 185 of sheet 'CSF 2.0'

RS.MA — Incident Management

Responses to detected cybersecurity incidents are managed

arcate:compliance:requirements/nist-csf/2.0/RS.MA · row 186 of sheet 'CSF 2.0'

RS.MA-01

The incident response plan is executed in coordination with relevant third parties once an incident is declared

arcate:compliance:requirements/nist-csf/2.0/RS.MA-01 · row 187 of sheet 'CSF 2.0'

RS.MA-02

Incident reports are triaged and validated

arcate:compliance:requirements/nist-csf/2.0/RS.MA-02 · row 188 of sheet 'CSF 2.0'

RS.MA-03

Incidents are categorized and prioritized

arcate:compliance:requirements/nist-csf/2.0/RS.MA-03 · row 189 of sheet 'CSF 2.0'

RS.MA-04

Incidents are escalated or elevated as needed

arcate:compliance:requirements/nist-csf/2.0/RS.MA-04 · row 190 of sheet 'CSF 2.0'

RS.MA-05

The criteria for initiating incident recovery are applied

arcate:compliance:requirements/nist-csf/2.0/RS.MA-05 · row 191 of sheet 'CSF 2.0'

RS.AN — Incident Analysis

Investigations are conducted to ensure effective response and support forensics and recovery activities

arcate:compliance:requirements/nist-csf/2.0/RS.AN · row 192 of sheet 'CSF 2.0'

RS.AN-01

[Withdrawn: Incorporated into RS.MA-02]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-01 · row 193 of sheet 'CSF 2.0'

RS.AN-02

[Withdrawn: Incorporated into RS.MA-02, RS.MA-03, RS.MA-04]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-02 · row 194 of sheet 'CSF 2.0'

RS.AN-03

Analysis is performed to establish what has taken place during an incident and the root cause of the incident

arcate:compliance:requirements/nist-csf/2.0/RS.AN-03 · row 195 of sheet 'CSF 2.0'

RS.AN-04

[Withdrawn: Moved to RS.MA-03]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-04 · row 196 of sheet 'CSF 2.0'

RS.AN-05

[Withdrawn: Moved to ID.RA-08]

arcate:compliance:requirements/nist-csf/2.0/RS.AN-05 · row 197 of sheet 'CSF 2.0'

RS.AN-06

Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved

arcate:compliance:requirements/nist-csf/2.0/RS.AN-06 · row 198 of sheet 'CSF 2.0'