Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile

Nelson, Alexander; Rekhi, Sanjay; Souppaya, Murugiah; Scarfone, Karen

doi:https://doi.org/10.6028/NIST.SP.800-61r3

NIST SP 800-61 Rev. 3

Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile

Documentation Topics

Date Published: April 2025

Supersedes: SP 800-61 Rev. 2 (08/06/2012)

Author(s)

Alexander Nelson (NIST), Sanjay Rekhi (NIST), Murugiah Souppaya (NIST), Karen Scarfone (Scarfone Cybersecurity)

Abstract

This publication seeks to assist organizations with incorporating cybersecurity incident response recommendations and considerations throughout their cybersecurity risk management activities as described by the NIST Cybersecurity Framework (CSF) 2.0. Doing so can help organizations prepare for incident responses, reduce the number and impact of incidents that occur, and improve the efficiency and effectiveness of their incident detection, response, and recovery activities. Readers are encouraged to utilize online resources in conjunction with this document to access additional information on implementing these recommendations and considerations.

Keywords

cyber threat information sharing; Cybersecurity Framework; cybersecurity incident; cybersecurity risk management; incident handling; incident management; incident response

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-61r3
Download URL

Supplemental Material:
Incident Response project

Document History:
04/03/24: SP 800-61 Rev. 3 (Draft)
04/03/25: SP 800-61 Rev. 3 (Final)

Topics

Security and Privacy

incident response, information sharing

Applications

cybersecurity framework