Skip to main content

💼 DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria

  • ID: /frameworks/nist-csf-v2.0/de-ae/08

Description​

  1. Apply incident criteria to known and assumed characteristics of activity in order to determine whether an incident should be declared
  2. Take known false positives into account when applying incident criteria

Similar​

  • Sections
    • /frameworks/nist-csf-v1.1/de-ae/05
    • /frameworks/nist-sp-800-53-r5/ir/04
    • /frameworks/nist-sp-800-53-r5/ir/08

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 DE.AE-5: Incident alert thresholds are establishedno data
💼 NIST SP 800-53 Revision 5 → 💼 IR-4 Incident Handling151no data
💼 NIST SP 800-53 Revision 5 → 💼 IR-8 Incident Response Plan1no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance