Law / Frameworks / NIST CSF 2.0 / Respond
NIST CSF 2.0, RespondRS.MA-04
Incidents are escalated or elevated as neededNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), RS.MA-04
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 1
- law
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents) |
In the process, put in place early warning indicators, assign roles and responsibilities for different incident types and scenarios, set out plans for communication and internal escalation, make sure at least major ICT-related incidents are reported to relevant senior management and to the management body, and establish response procedures to mitigate impacts and make services operational and secure in a timely manner (Article 17(3)(a) and (c) to (f)). |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.