IR-4(1)
IR-4(1): Automated Incident Handling Processes
Support the incident handling process using [automated mechanisms used to support the incident handling process are defined;].
Supplemental
Automated mechanisms that support incident handling processes include online incident management systems and tools that support the collection of live response data, full network packet capture, and forensic analysis.
| CIA Levels | |
|---|---|
| Confidentiality | moderate |
| Integrity | moderate |
| Availability | moderate |
| Overlays |
|---|
| DAF Baseline, Int-A, Int-B, Int-C |
| CSF Categories |
|---|
| None |