RS.MA-02—Incident reports are triaged and validated

>Control Description

This incident management subcategory ensures that incident reports are triaged and validated. Key activities include: Preliminarily review incident reports to confirm that they are cybersecurity-related and necessitate incident response activities; Apply criteria to estimate the severity of an incident.

>Cross-Framework Mappings

>Informative References

Official NIST mappings to external frameworks and standards. Source: NIST CSF 2.0

CCMv4.0

SEF-06

CRI Profile v2.0

RS.MA-02

RS.MA-02.01

CSF v1.1

RS.AN-1

RS.AN-2

CoP

ISO/IEC 27001:2022

Mandatory Clause: None

Annex A Controls: 5.24

Annex A Controls: 5.26

Annex A Controls: 5.27

Annex A Controls: 5.28

Annex A Controls: 6.8

NICE Framework

IO-WRL-005

IO-WRL-006

IO-WRL-007

PD-WRL-001

PD-WRL-002

PD-WRL-003

PD-WRL-005

PCI DSS

10.4.1

10.2.1

12.10.1

12.10.4

SCF

IRO-02

IRO-04

SP 800-171 Rev 3

03.06.01

03.06.02

SP 800-53 Rev 5.1.1

IR-04

IR-05

IR-06

SP 800-53 Rev 5.2.0