RS.MA - Incident Management

RS.MA - Incident Management is a core activity of the NIST Cybersecurity Framework's Respond function that establishes and maintains processes for handling cybersecurity events. It defines how organizations detect, analyze, contain, eradicate, and recover from incidents, assigns roles and responsibilities, and ensures lessons learned are incorporated to improve future response capabilities.