NIST releases incident reporting profile for comment aligned with cybersecurity framework update

The National Institute of Standards and Technology proposes a model for incident response mapped to the cybersecurity framework update, known as “CSF 2.0,” in a draft publication to revise the agency’s decade-old guidelines for handling computer security incidents.

“Incident response is a critical part of cybersecurity risk management and should be integrated across organizational operations. The six Functions of the NIST Cybersecurity Framework (CSF) 2.0 all play vital roles in incident response,” NIST says in a Wednesday announcement.

NIST says...