NIST Incident
NIST Incident
Details
| ID | NIST |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Incident Info 10 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 24 |
| severity | Col 0-2, Height: 24 |
| dbotsource | Col 0-2, Height: 24 |
| playbookid | Col 0-2, Height: 24 |
| sourceinstance | Col 0-2, Height: 24 |
| sourcebrand | Col 0-2, Height: 24 |
| owner | Col 0-2, Height: 24 |
Notes
Work Plan
Child Incidents
Evidence
Team Members
Timeline Information
| Field ID | Position |
|---|---|
| dbotmodified | Col 0-1, Height: 55 |
| dbotduedate | Col 0-2, Height: 55 |
| occurred | Col 0-1, Height: 55 |
| dbotclosed | Col 1-2, Height: 55 |
| dbotcreated | Col 1-2, Height: 55 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 24 |
| closereason | Col 0-2, Height: 24 |
| closenotes | Col 0-2, Height: 24 |
NIST Details
| Field ID | Position |
|---|---|
| niststage | Col 0-2, Height: 24 |
Bad or Suspicious Indicators
Lessons Learned - Current Incident 4 sections
Incident Description
| Field ID | Position |
|---|---|
| exactlywhathappenedandatwhattimes | Col 0-2, Height: 55 |
Staff Performance Examination
| Field ID | Position |
|---|---|
| howwelldidstaffandmanagementperformindealingwiththeincidentwerethedocumentedproceduresfollowedweretheyadequate | Col 0-2, Height: 24 |
| whatwouldthestaffandmanagementdodifferentlythenexttimeasimilarincidentoccurs | Col 2-4, Height: 24 |
Incident Handling Examination
| Field ID | Position |
|---|---|
| wereanystepsoractionstakenthatmighthaveinhibitedtherecovery | Col 0-2, Height: 24 |
| howcouldinformationsharingwithotherorganizationshavebeenimproved | Col 0-2, Height: 24 |
| whatinformationwasneededsooner | Col 0-2, Height: 24 |
Future Recommendations
| Field ID | Position |
|---|---|
| whatcorrectiveactionscanpreventsimilarincidentsinthefuture | Col 0-2, Height: 24 |
| whatprecursorsorindicatorsshouldbewatchedforinthefuturetodetectsimilarincidents | Col 0-2, Height: 24 |
| whatadditionaltoolsorresourcesareneededtodetectanalyzeandmitigatefutureincidents | Col 2-4, Height: 24 |
Lessons Learned - Linked Incidents 2 sections
Linked Incidents - Lessons Learned
Linked Incidents - Closing Information
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.