+RS.AN-03 Analysis is performed to establish what has taken place during an incident and the root cause of the incident

RS.AN-03 Analysis is performed to establish what has taken place during an incident and the root cause of the incident

Statement

Analysis is performed to establish what has taken place during an incident and the root cause of the incident

Guidance

Determine the sequence of events that occurred during the incident and which assets and resources were involved in each event

Guidance

Attempt to determine what vulnerabilities, threats, and threat actors were directly or indirectly involved in the incident

Guidance

Analyze the incident to find the underlying, systemic root causes

Guidance

Check any cyber deception technology for additional information on attacker behavior

1. Übersicht

Bezeichnung Standard

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen
Quelle Anforderung

3. Zugehörige Regulierungen

Regulierungen
Quelle Regulierung

Verknüpfte Vorgänge

Verknüpfungen
Verknüpfungstyp Vorgang
is blocked by Root Cause Analysis (RCA) & Lessons Learned