DE.AE-04 The estimated impact and scope of adverse events are understood

Statement

The estimated impact and scope of adverse events are understood

Guidance

Use SIEMs or other tools to estimate impact and scope, and review and refine the estimates

Guidance

A person creates their own estimates of impact and scope

1. Overview

1.1 References

• 3.4 Event assessment and classification
• 4.3 Crisis management

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final