Criteria for cybersecurity incident declaration are aligned with cyber risk prioritisation criteria (RISK-3b)
Context and Guidance: Aligning incident declaration criteria with the risk criteria established in RISK-3b ensures that the organisation is recognising and addressing incidents that involve risks that the organisation is particularly concerned about.
Related Practices • Dependency: Implementing this practice depends upon prior implementation of RISK-3b. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: RESPONSE-2a, RESPONSE-2c, RESPONSE-2e, RESPONSE-2h.