iro-02-incidenthandling.md

SCF - IRO-02 - Incident Handling

Mechanisms exist to cover the preparation, automated detection or intake of incident reporting, analysis, containment, eradication and recovery.

Mapped framework controls

ISO 27002

• A.5.24
• A.5.25
• A.5.26
• A.6.8

NIST 800-53

• IR-4

SOC 2

• CC7.3
• CC7.4

Control questions

Does the organization cover the preparation, automated detection or intake of incident reporting, analysis, containment, eradication and recovery?