Implementation Objective
Execute a disciplined incident command process that coordinates responders, decisions, and stakeholder communications.
NIST CSF 2.0 Category
RS.MA Incident Management
RS Respond | Coordinate incident command, communications, and operational actions.
Implementation Actions
- Maintain IR plan and comms matrix.
- Operate command workflow during incidents.
- Integrate legal/leadership stakeholders.
Evidence Examples
- IR plan
- Command logs
- Incident summaries
Suggested Metrics
- Containment time
- Comms SLA adherence
Framework Crosswalk
Direct mappings for this CSF category into NIST SP 800-171 family sections and CIS Controls v8 implementation domains.