Skip to main content

πŸ’Ό DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria

  • Contextual name: πŸ’Ό DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria
  • ID: /frameworks/nist-csf-v2.0/de-ae/08
  • Located in: πŸ’Ό Adverse Event Analysis (DE.AE)

Description​

  1. Apply incident criteria to known and assumed characteristics of activity in order to determine whether an incident should be declared
  2. Take known false positives into account when applying incident criteria

Similar​

  • Sections
    • /frameworks/nist-csf-v1.1/de-ae/05
    • /frameworks/nist-sp-800-53-r5/ir/04
    • /frameworks/nist-sp-800-53-r5/ir/08

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό DE.AE-5: Incident alert thresholds are established
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό IR-4 Incident Handling15
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό IR-8 Incident Response Plan1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags