💼 RS.MI-02: Incidents are eradicated

• Contextual name: 💼 RS.MI-02: Incidents are eradicated
• ID: /frameworks/nist-csf-v2.0/rs-mi/02
• Located in: 💼 Incident Mitigation (RS.MI)

Description

1. Cybersecurity technologies and cybersecurity features of other technologies (e.g., operating systems, network infrastructure devices) automatically perform eradication actions
2. Allow incident responders to manually select and perform eradication actions
3. Allow a third party (e.g., managed security service provider) to perform eradication actions on behalf of the organization

Similar

• Sections
  • /frameworks/nist-csf-v1.1/rs-mi/02
  • /frameworks/nist-sp-800-53-r5/ir/04

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 RS.MI-2: Incidents are mitigated		7	7
💼 NIST SP 800-53 Revision 5 → 💼 IR-4 Incident Handling	15

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (7)

Policy	Logic Count	Flags
📝 Azure Subscription Microsoft Defender For (Managed Instance) Azure SQL Databases is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For App Services is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Containers is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Key Vault is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Servers is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For SQL Servers On Machines is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Storage is not set to On 🟢	1	🟢 x6