Incident Response¶
A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement.
Generating After Action Reports¶
KSI-INR-AAR
Former ID: KSI-INR-03
Changelog:
- 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.
Generate incident after action reports and persistently incorporate lessons learned.
Related SP 800-53 Controls: IR-3, IR-4, IR-4.1, IR-8
Terms: Incident, Persistently
Reviewing Incident Response Procedures¶
KSI-INR-RIR
Former ID: KSI-INR-01
Changelog:
- 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.
Persistently review the effectiveness of documented incident response procedures.
Related SP 800-53 Controls: IR-4, IR-4.1, IR-6, IR-6.1, IR-6.3, IR-7, IR-7.1, IR-8, IR-8.1, SI-4.5
Terms: Incident, Persistently, Vulnerability Response
Reviewing Past Incidents¶
KSI-INR-RPI
Former ID: KSI-INR-02
Changelog:
- 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.
Persistently review past incidents for patterns or vulnerabilities.
Related SP 800-53 Controls: IR-3, IR-4, IR-4.1, IR-5, IR-8
Terms: Incident, Persistently, Vulnerability