IR-4(4)
IR-4(4): Information Correlation
Correlate incident information and individual incident responses to achieve an organization-wide perspective on incident awareness and response.
Supplemental
Sometimes, a threat event, such as a hostile cyber-attack, can only be observed by bringing together information from different sources, including various reports and reporting procedures established by organizations.
| CIA Levels | |
|---|---|
| Confidentiality | low |
| Integrity | low |
| Availability | low |
| Overlays |
|---|
| DAF Baseline, Privacy (high), Privacy (moderate) |
| CSF Categories |
|---|
| None |