Law / Frameworks / NIST CSF 2.0 / Respond
NIST CSF 2.0, RespondRS.AN-03
Analysis is performed to establish what has taken place during an incident and the root cause of the incidentNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), RS.AN-03
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
Breach notification
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Zimbabwe |
Cyber and Data Protection Regulations 2024, security breach notification |
Finish the data breach investigation and submit your report within 21 days from the date of notification. |
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents) |
Record all ICT-related incidents and significant cyber threats, and establish procedures and processes that ensure consistent and integrated monitoring, handling and follow-up of ICT-related incidents so that root causes are identified, documented and addressed (Article 17(2)). |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.
framework