IR-4 (4)
IR-4 (4): Information Correlation
The organization correlates incident information and individual incident responses to achieve an organization-wide perspective on incident awareness and response.
Supplemental
Sometimes the nature of a threat event, for example, a hostile cyber attack, is such that it can only be observed by bringing together information from different sources including various reports and reporting procedures established by organizations.
| CIA Levels | |
|---|---|
| Confidentiality | low |
| Integrity | low |
| Availability | low |
| Overlays |
|---|
| None |