RS.MI-01 Incidents are contained

Statement

Incidents are contained

Guidance

Cybersecurity technologies (e.g., antivirus software) and cybersecurity features of other technologies (e.g., operating systems, network infrastructure devices) automatically perform containment actions

Guidance

Allow incident responders to manually select and perform containment actions

Guidance

Allow a third party (e.g., internet service provider, managed security service provider) to perform containment actions on behalf of the organization

Guidance

Automatically transfer compromised endpoints to a remediation virtual local area network (VLAN)

1. Επισκόπηση

1.1 Παραπομπές

• 3.1 Incident handling policy
• 3.3 Event reporting
• 3.5 Incident response

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final