RS.MA-03 Incidents are categorized and prioritized

Statement

Incidents are categorized and prioritized

Guidance

Further review and categorize incidents based on the type of incident (e.g., data breach, ransomware, DDoS, account compromise)

Guidance

Prioritize incidents based on their scope, likely impact, and time-critical nature

Guidance

Select incident response strategies for active incidents by balancing the need to quickly recover from an incident with the need to observe the attacker or conduct a more thorough investigation

1. Преглед

1.1 Препратки

• 3.4 Event assessment and classification
• 3.5 Incident response

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final