RS.AN-03
Analysis is performed to establish what has taken place during an incident and the root cause of the incident
Se realiza un análisis para establecer lo sucedido durante un incidente y la causa raíz del mismo
Appendix ANIST CSF 2.0 Core
Categoria RS.AN
Incident Analysis
Analisis de incidentes
Investigations are conducted to ensure effective response and support forensics and recovery activities.
Subcategorias Appendix A
RS.AN-06
Actions performed during an investigation are recorded, and the records’ integrity and provenance are preserved
Se registran las acciones realizadas durante una investigación, y se preservan la integridad y la procedencia de los registros
RS.AN-07
Incident data and metadata are collected, and their integrity and provenance are preserved
Se recopilan los datos y metadatos del incidente, y se preservan su integridad y procedencia
RS.AN-08
An incident’s magnitude is estimated and validated
La magnitud de un incidente se estima y valida