RS.AN-07—Incident data and metadata are collected, and their integrity and provenance are preserved

>Control Description

This incident analysis subcategory ensures that incident data and metadata are collected, and their integrity and provenance are preserved. Key activities include: Collect, preserve, and safeguard the integrity of all pertinent incident data and metadata (e.

>Cross-Framework Mappings

>Informative References

Official NIST mappings to external frameworks and standards. Source: NIST CSF 2.0

CRI Profile v2.0

RS.AN-07

RS.AN-07.01

ISO/IEC 27001:2022

Mandatory Clause: None

Annex A Controls: 5.28

NICE Framework

IO-WRL-001

IO-WRL-002

IO-WRL-003

IO-WRL-006

PD-WRL-002

PD-WRL-003

PD-WRL-004

PCI DSS

10.2.1

10.3.2

10.3.3

10.6.1

10.2.2

SCF

IRO-08

SP 800-171 Rev 3

03.03.06

03.06.01

03.06.02

SP 800-53 Rev 5.1.1

AU-07

IR-04

IR-06

SP 800-53 Rev 5.2.0