Skip to main content

💼 DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria

  • Contextual name: 💼 DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria
  • ID: /frameworks/nist-csf-v2.0/de-ae/08
  • Located in: 💼 Adverse Event Analysis (DE.AE)

Description​

  1. Apply incident criteria to known and assumed characteristics of activity in order to determine whether an incident should be declared
  2. Take known false positives into account when applying incident criteria

Similar​

  • Sections
    • /frameworks/nist-csf-v1.1/de-ae/05
    • /frameworks/nist-sp-800-53-r5/ir/04
    • /frameworks/nist-sp-800-53-r5/ir/08

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v1.1 → 💼 DE.AE-5: Incident alert thresholds are established
💼 NIST SP 800-53 Revision 5 → 💼 IR-4 Incident Handling15
💼 NIST SP 800-53 Revision 5 → 💼 IR-8 Incident Response Plan1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags