graphgrc

SCF - IRO-13 - Root Cause Analysis (RCA) & Lessons Learned

Mechanisms exist to incorporate lessons learned from analyzing and resolving cybersecurity & data privacy incidents to reduce the likelihood or impact of future incidents.

Mapped framework controls

ISO 27002

• A.5.24
• A.5.27

NIST 800-53

• IR-1

Control questions

Does the organization incorporate lessons learned from analyzing and resolving cybersecurity & data privacy incidents to reduce the likelihood or impact of future incidents?

This site is open source. Improve this page.