DE.AE-04:

The estimated impact and scope of adverse events are understood

Implementation Examples

Ex1:

Use SIEMs or other tools to estimate impact and scope, and review and refine the estimates

Ex2:

A person creates their own estimates of impact and scope