美国国家标准与技术研究院：2025网络安全风险管理事件响应建议指南（英文版）（48页）.pdf

1、NIST Special Publication 800 NIST SP 800-61r3Incident Response Recommendations and Considerations for Cybersecurity Risk Management A CSF 2.0 Community Profile Alex Nelson Sanjay Rekhi Murugiah Souppaya Karen Scarfone This publication is available free of charge from:https:/doi.org/10.6028/NIST.SP.8

2、00-61r3 NIST Special Publication 800 NIST SP 800-61r3 Incident Response Recommendations and Considerations for Cybersecurity Risk Management A CSF 2.0 Community Profile Alex Nelson Sanjay Rekhi Murugiah Souppaya*Computer Security Division Information Technology Laboratory Karen Scarfone Scarfone Cyb

3、ersecurity*Former NIST employee;all work for this publication was done while at NIST.This publication is available free of charge from:https:/doi.org/10.6028/NIST.SP.800-61r3 April 2025 U.S.Department of Commerce Howard Lutnick,Secretary of Commerce National Institute of Standards and Technology Cra

4、ig Burkhardt,Acting Under Secretary of Commerce for Standards and Technology and Acting NIST Director NIST SP 800-61r3 Incident Response Recommendations and April 2025 Considerations for Cyber Risk Management Certain equipment,instruments,software,or materials,commercial or non-commercial,are identi

5、fied in this paper in order to specify the experimental procedure adequately.Such identification does not imply recommendation or endorsement of any product or service by NIST,nor does it imply that the materials or equipment identified are necessarily the best available for the purpose.There may be

6、 references in this publication to other publications currently under development by NIST in accordance with its assigned statutory responsibilities.The information in this publication,including concepts and methodologies,may be used by federal agencies even before the completion of such companion p