+KSI-INR Incident Response
---+KSI-INR-AAR Generating After Action Reports
---+KSI-INR-RIR Reviewing Incident Response Procedures
---+KSI-INR-RPI Reviewing Past Incidents
|
KSI-INR Incident Response
1. Panoramica
| Titolo |
Standard |
|
KSI-INR-AAR Generating After Action Reports
|
Incident after action reports are generated and lessons learned are persistently incorporated. NIST SP 800-53 Rev. 5 controls: IR-3, IR-4, IR-4(1), IR-5(1), IR-8, IR-9(3) Defined terms: Incident, Persistently
|
|
KSI-INR-RIR Reviewing Incident Response Procedures
|
The effectiveness of documented incident response procedures is persistently reviewed. NIST SP 800-53 Rev. 5 controls: IR-4, IR-4(1), IR-4(11), IR-6, IR-6(1), IR-6(3), IR-7, IR-7(1), IR-8, IR-8(1), IR-9(3), SI-4(5) Defined terms: Incident, Persistently, Vulnerability Response
|
|
KSI-INR-RPI Reviewing Past Incidents
|
Past incidents are persistently reviewed for patterns or vulnerabilities that were not previously apparent or identified. NIST SP 800-53 Rev. 5 controls: IR-3, IR-4, IR-4(1), IR-4(11), IR-4(4), IR-5, IR-5(1), IR-8, RA-5(8) Defined terms: Incident, Persistently, Vulnerability
|
1.1 Riferimenti
1.2 Requisiti identificati
1.3 Regolamentazioni correlate
2. Requisiti identificati
Requisiti
| Fonte |
Requisito |
3. Regolamentazioni correlate
Regolamentazioni
| Fonte |
Regolamentazione |
- FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.
DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.
|