CISA Cyber Resilience Review (CRR) v4.0
Incident Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 IM.4: A process for responding to and recovering from incidents is established

What does IM.4 require?

Stakeholders receive escalated incidents for their input and for resolution, responses follow predefined procedures, status and response updates reach affected parties (public relations staff and outside media included), and each incident is followed through to resolution.

Maintained by Gerard Blokdyk

Other controls in Incident Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.