RS.AN-5

Standard

Standard Version

NIST CSF

(v1.1)

Analysis (RS.AN): Analysis is conducted to ensure effective response and support recovery activities.

Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. internal testing, security bulletins, or security researchers)