[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Frs-ma":3},{"item":4,"lessons":16,"controls":22,"related":23},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","rs-ma","RS.MA","RS.MA: Incident Management",1,"US National Institute of Standards and Technology (NIST)","**What it asks for.** This category asks that responses to detected cybersecurity incidents are managed. It covers executing the incident response plan with relevant third parties, triaging and validating reports, categorising and prioritising incidents, escalating as needed and applying criteria for starting recovery.\n\n**In practice.** A mature process has a clear entry point for incident reports, a triage step that confirms whether an event is an incident, and defined severity categories that drive escalation and resourcing. Incident commanders coordinate internal teams, suppliers and service providers according to agreed roles. Criteria for moving from response to recovery are documented. Evidence includes the incident response plan, a ticketing or case management system with timelines, escalation records, supplier contacts and post-incident reviews.\n\n**Common gaps.** Gaps typically include inconsistent severity ratings, slow escalation to decision makers and unclear handoffs with managed service providers. Many organisations also lack defined criteria for when to begin recovery.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18],{"slug":19,"title":20,"published_at":21},"nist-nsa-cisa-issue-guidance-on-ai-incident-readiness-for-high-risk-ai-systems","NIST, NSA & CISA Issue Guidance on AI Incident Readiness for High-Risk AI Systems","2026-10-16T18:21:54.014+00:00",[],[24,29,33,38,43,47,52,56],{"family":25,"item":26,"code":27,"title":28,"together":9},"cis","16","Control 16","Application Software Security",{"family":25,"item":30,"code":31,"title":32,"together":9},"17","Control 17","Incident Response Management",{"family":34,"item":35,"code":36,"title":37,"together":9},"eu-ai-act","9","Article 9","Risk management system",{"family":39,"item":40,"code":41,"title":42,"together":9},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",{"family":44,"item":45,"code":46,"title":46,"together":9},"itil","overview","ITIL",{"family":48,"item":49,"code":50,"title":51,"together":9},"nist-800-53","ir-4","IR-4","Incident Handling",{"family":53,"item":45,"code":54,"title":55,"together":9},"nist-ai-rmf","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":57,"item":58,"code":59,"title":60,"together":9},"nist-sp","800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management"]