SANS Incident Handler's Handbook and PICERL Methodology
Identification

SANS Incident Handler's Handbook and PICERL Methodology PICERL-I-02: Identification: Incident Declaration and Notification

Define criteria and authority for declaring an incident, initial notification cadence to stakeholders, and engagement of legal, communications, executive sponsors, and external counsel.

Other controls in Identification

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.