Incident Response Reporting and Communication (RS.CO)

Response activities are coordinated with internal and external stakeholders as required by laws, regulations, or policies

Subcategories

Personnel know their roles and order of operations when a response is needed

[Withdrawn: Incorporated into PR.AT-01 ]

Internal and external stakeholders are notified of incidents

Information is shared with designated internal and external stakeholders

Coordination with stakeholders occurs consistent with response plans

[Withdrawn: Incorporated into RS.MA-01, RS.MA-04]

Voluntary information sharing occurs with external stakeholders to achieve broader cybersecurity situational awareness

[Withdrawn: Incorporated into RS.CO-03]

Frameworks and Controls

NIST Cybersecurity Framework V2.0