RS: Respond
Previous Version:
- NIST Cybersecurity Framework v1.1:
- RS: Respond
Description
Actions regarding a detected cybersecurity incident are taken
Framework Categories
RS.MA: Incident Management
Responses to detected cybersecurity incidents are managed
RS.AN: Incident Analysis
Investigations are conducted to ensure effective response and support forensics and recovery activities
RS.CO: Incident Response Reporting And Communication
Response activities are coordinated with internal and external stakeholders as required by laws, regulations, or policies
RS.MI: Incident Mitigation
Activities are performed to prevent expansion of an event and mitigate its effects