[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Frs":3},{"item":4,"lessons":16,"controls":34,"related":61},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","rs","RS","Respond (RS)",4,"US National Institute of Standards and Technology (NIST)","**What it asks for.** The Respond function covers the actions taken once a cybersecurity incident has been detected. It groups outcomes for managing the incident, analysing it, reporting and communicating about it, and containing and mitigating its effects.\n\n**In practice.** A mature organisation has a documented incident response plan with clear triage criteria, severity levels, named roles and escalation paths, and it executes that plan in coordination with suppliers and other parties. Analysts establish what happened and the root cause, preserve evidence with integrity, and record actions as they are taken. Stakeholders, including regulators where reporting duties apply, are informed on time, and incidents are contained and eradicated in a controlled way. Evidence includes the plan, incident tickets and timelines, exercise reports and notification records.\n\n**Common gaps.** Organisations often have a plan that has never been exercised, unclear authority to declare an incident, and weak evidence handling. Regulatory notification timelines and third party involvement are frequently not built into the playbooks.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26,30],{"slug":19,"title":20,"published_at":21},"automating-vulnerability-remediation-closing-the-ctem-loop-with-agentic-ai","Automating Vulnerability Remediation: Closing the CTEM Loop with Agentic AI","2026-09-24T12:20:37.966+00:00",{"slug":23,"title":24,"published_at":25},"eu-cyber-resilience-act-article-14-reporting-now-mandatory-for-digital-product-makers","EU Cyber Resilience Act Article 14 Reporting Now Mandatory for Digital Product Makers","2026-09-23T12:22:02.053+00:00",{"slug":27,"title":28,"published_at":29},"iran-linked-hackers-breach-us-critical-infrastructure-triggering-sweeping-sanctions","Iran-Linked Hackers Breach U.S. Critical Infrastructure, Triggering Sweeping Sanctions","2026-08-25T20:20:37.867+00:00",{"slug":31,"title":32,"published_at":33},"volt-typhoon-war-game-exposes-critical-infrastructure-cyber-catastrophe-risk","Volt Typhoon War Game Exposes Critical Infrastructure Cyber Catastrophe Risk","2026-07-08T12:22:34.555+00:00",[35,40,45,49,53,57],{"slug":36,"name":37,"problem":38,"stories":39},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",2,{"slug":41,"name":42,"problem":43,"stories":44},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",1,{"slug":46,"name":47,"problem":48,"stories":44},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":50,"name":51,"problem":52,"stories":44},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":54,"name":55,"problem":56,"stories":44},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"slug":58,"name":59,"problem":60,"stories":44},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",[62,68,72,76,81,85,90,94],{"family":63,"item":64,"code":65,"title":66,"together":67},"cis","17","Control 17","Incident Response Management",3,{"family":63,"item":69,"code":70,"title":71,"together":67},"7","Control 7","Continuous Vulnerability Management",{"family":73,"item":74,"code":75,"title":75,"together":67},"itil","overview","ITIL",{"family":77,"item":78,"code":79,"title":80,"together":39},"cisa","cpg","CPGs","Cross-Sector Cybersecurity Performance Goals (CPGs)",{"family":63,"item":82,"code":83,"title":84,"together":39},"12","Control 12","Network Infrastructure Management",{"family":86,"item":87,"code":88,"title":89,"together":39},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",{"family":91,"item":74,"code":92,"title":93,"together":44},"eu-cra","Article 11","Cyber Resilience Act (Regulation (EU) 2024\u002F2847)",{"family":63,"item":95,"code":96,"title":97,"together":44},"16","Control 16","Application Software Security"]