+RS.AN-03 Analysis is performed to establish what has taken place during an incident and the root cause of the incident

RS.AN-03 Analysis is performed to establish what has taken place during an incident and the root cause of the incident

Statement

Analysis is performed to establish what has taken place during an incident and the root cause of the incident

Guidance

Determine the sequence of events that occurred during the incident and which assets and resources were involved in each event

Guidance

Attempt to determine what vulnerabilities, threats, and threat actors were directly or indirectly involved in the incident

Guidance

Analyze the incident to find the underlying, systemic root causes

Guidance

Check any cyber deception technology for additional information on attacker behavior

1. Prezentare generală

Titlu Standard

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe
Sursă Cerință

3. Reglementări asociate

Reglementări
Sursă Reglementare

Tichete legate

Legături
Tip de legătură Tichet
is blocked by Root Cause Analysis (RCA) & Lessons Learned