Does NIST Cybersecurity Framework require Incident Response?
Yes — 1 provision
Incident Response (RS.AN, RS.MI)
"NIST CSF 2.0 defines Incident Analysis (RS.AN) and Incident Mitigation (RS.MI) as categories under the Respond function."
Requirements
| Requirement | Details |
|---|---|
| Analysis | Investigate incidents to determine scope and impact |
| Mitigation | Contain and mitigate effects of detected incidents |
Sources: NIST CSF 2.0