Law / Frameworks / NIST CSF 2.0 / Respond
NIST CSF 2.0, RespondRS.MA-01
The incident response plan is executed in coordination with relevant third parties once an incident is declaredNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), RS.MA-01
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST Privacy FrameworkPR.PO-P7 Response plans (Incident Response and Business Continuity) and recovery..., 2 laws
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Canada |
OSFI Guideline B-13, Technology and Cyber Risk Management |
Detect, log, manage, resolve, monitor and report on technology incidents, and minimize their impact. Respond to, contain, recover from and learn from cyber security incidents affecting your technology assets, including incidents that originate at third-party providers. |
Vulnerability and incident reporting
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Vietnam |
Cybersecurity Law, Incident Response and Reporting Duties |
When a cybersecurity incident occurs, implement that plan immediately and simultaneously report it to the specialized cybersecurity protection force; the Law states no fixed number of hours for this report. |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.