Skip to main content

💼 Incident Analysis (RS.AN)

  • Contextual name: 💼 Incident Analysis (RS.AN)
  • ID: /frameworks/nist-csf-v2.0/rs-an
  • Located in: 💼 NIST CSF v2.0

Description​

Investigations are conducted to ensure effective response and support forensics and recovery activities.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 RS.AN-03: Analysis is performed to establish what has taken place during an incident and the root cause of the incident
💼 RS.AN-06: Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved
💼 RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved
💼 RS.AN-08: An incident's magnitude is estimated and validated