API 1164 API1164-12: Incident Response

What else in your programme already covers this

This control maps to 45 controls across 34 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-06 Email content filtering (Excellent)
ASD37-12 Antivirus software with heuristics (Very Good)
ASD37-16 Antivirus software with signatures (Limited)

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 2 controls

NISTSP82-5 OT Configuration Management, Patching, Vulnerability Management, and Malware Protection
NISTSP82-7 OT Incident Response, Forensics, Recovery, and Continuity

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-4.1 Malware Protection

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 1 control

CPG-7.B Incident Response Plans

FBI CJIS Security Policy · 1 control

CJIS-10 System and Information Integrity

IEC 62443 · 1 control

IEC62443-12 Malware prevention for operational systems

IEEE 1686 · 1 control

IEEE1686-Section5.5-5.6-5.7-5.8-Firmware-ConfigSW-TimeSync-DataAtRest IEEE 1686 Section 5.5-5.8 - Firmware Quality + Configuration Software Security + Time Synchronisation + Data Protection at Rest + Patch + Malware + Hardening + Vulnerability

ISO 27019 · 1 control

ISO27019-12 Malware prevention for operational systems

ISO 27043 · 1 control

ISO27043-22 Protection from malware

ISO/IEC 27010:2015 · 1 control

27010-12.2 Protection from malware

ISO/IEC 27011:2024 · 1 control

27011-8.5 Vulnerability and malware management

ISO/SAE 21434 · 1 control

ISO21434-22 Protection from malware

MITRE ATT&CK · 1 control

MITRE-ATTACK-Detection-Data-Sources-Analytics-Sigma-Splunk-KQL-Yara-Snort-SIEM-Hunt-Engineering MITRE ATT&CK Detection + Data Sources + Analytics + Sigma + Splunk + KQL + Yara + Snort + SIEM + Hunt

MITRE D3FEND · 1 control

MITRE-D3FEND-Harden-Tactic-Application-Credential-Message-Platform-Hardening-MFA-Encryption-Secure-Boot MITRE D3FEND Harden Tactic + Application + Credential + Message + Platform + MFA + Encryption + Secure Boot

NERC CIP · 1 control

NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010)

NIST SP 1800-32 · 1 control

NIST1800-32-12 Malware prevention for operational systems

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material

NIST SP 800-123 · 1 control

NISTSP123-5 Server Operations - Patching, Malware, Logging, Backup

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 1 control

MD124-TECH-03 Mobile Application Vetting

NIST SP 800-137 · 1 control

NISTSP137-6 Malware, Identity Access, and Network Boundary Monitoring

NIST SP 800-53 Rev 5 · 1 control

NIST800-IR-4 Incident handling

NIST SP 800-61 · 1 control

NISTSP61-5 Containment, Eradication, and Recovery

NIST SP 800-63-4 · 1 control

NISTSP63R4-8 Operational Audit, Session Management, Recovery, and Cross-cutting Controls

NIST SP 800-88 · 1 control

NISTSP88-7 Verification, Audit, Training, and Environmental/Safety Controls

NIST SP 800-92 · 1 control

NISTSP92-5 Log Analysis: Correlation, Baselining, Anomaly Detection, Alerting, Manual Review

OWASP ASVS · 1 control

OWASPASVS-10 Malicious Code Verification (V10)

OWASP MASVS · 1 control

OWASPMASVS-6 MASVS-CODE: Code Quality, Build Settings, and Updates

OWASP SAMM · 1 control

OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management

OpenSSF Scorecard · 1 control

OSSFSC-4 Security Policy, Vulnerability Disclosure, Responsible Reporting

PTES · 1 control

PTESPHASE-3 Threat Modeling

SANS Incident Handler's Handbook and PICERL Methodology · 1 control

PICERL-E1 Threat Removal

SIG (Shared Assessments) · 1 control

SHAREASSESS-4 Vulnerability Management, Patching, Application Security

SLSA · 1 control

SUPCHAIN-2 Source Integrity - Branch Protection, Code Review, Two-Person Rule

TISAX - Trusted Information Security Assessment Exchange · 1 control

TISAX-TECH-03 Operations and Communications Security

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.