💼 RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved
- Contextual name: 💼 RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved
- ID:
/frameworks/nist-csf-v2.0/rs-an/07 - Located in: 💼 Incident Analysis (RS.AN)
Description
- Collect, preserve, and safeguard the integrity of all pertinent incident data and metadata (e.g., data source, date/time of collection) based on evidence preservation and chain-of-custody procedures
Similar
- Sections
/frameworks/nist-sp-800-53-r5/au/07/frameworks/nist-sp-800-53-r5/ir/04/frameworks/nist-sp-800-53-r5/ir/06
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-7 Audit Record Reduction and Report Generation | 2 | 1 | 1 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 IR-4 Incident Handling | 15 | |||
| 💼 NIST SP 800-53 Revision 5 → 💼 IR-6 Incident Reporting | 3 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|