RS.MI-02 Incidents are eradicated

Statement

Incidents are eradicated

Guidance

Cybersecurity technologies and cybersecurity features of other technologies (e.g., operating systems, network infrastructure devices) automatically perform eradication actions

Guidance

Allow incident responders to manually select and perform eradication actions

Guidance

Allow a third party (e.g., managed security service provider) to perform eradication actions on behalf of the organization

1. Overview

1.1 References

• 3.1 Incident handling policy
• 3.5 Incident response

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final