Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology
Open accessAbstract
This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347.NIST is responsible for developing information security standards and guidelines, including minimum requirements for Federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate Federal officials exercising policy authority over such systems.This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130, Section 8b(3), Securing Agency Information Systems, as analyzed in Circular A-130, Appendix IV: Analysis of Key Sections.Supplemental information is provided in Circular A-130, Appendix III, Security of Federal Automated Information Resources.Nothing in this publication should be taken to contradict the standards and guidelines made mandatory and binding on Federal agencies by the Secretary of Commerce under statutory authority.Nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, Director of the OMB, or any other Federal official.This publication may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright in the United States.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Integrity of audit logs produced by IoT devices is a prerequisite for post-incident forensics, regulatory compliance, and operational accountability.
“When these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Cichonski et al., 2012
The standards serve as frameworks to develop secure networks and can be used as guides and best practice definitions.
“The standards serve as frameworks to develop secure networks and can be used as guides and best practice definitions [84].”
From Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure. (2023) · cites this paper as [84]
Cites
Guide to test, training, and exercise programs for IT plans and capabilities
Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006) · doi:10.6028/nist.sp.800-84 · Cited by 41 · see citing works
Self-citationRecommended security controls for federal information systems and organizations
Ross, R., Katzke, S. W., Johnson, L. A., Swanson, M., Stoneburner, G., & Rogers, G. (2007) · doi:10.6028/nist.sp.800-53r2 · Cited by 8 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377 · see citing works
Studying users' computer security behavior: A health belief perspective
Ng, B.-Y., Kankanhalli, A., & Xu, Y. C. (2008) · Decision Support Systems · doi:10.1016/j.dss.2008.11.010 · Cited by 588 · see citing works
Security and Privacy Controls for Information Systems and Organizations
Joint Task Force Interagency Working Group (2020) · doi:10.6028/nist.sp.800-53r5 · Cited by 419 · see citing works
A survey of cyber security management in industrial control systems
Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344 · see citing works
Data-Driven Cybersecurity Incident Prediction: A Survey
Sun, N., Zhang, J., Rimba, P., Gao, S., Zhang, L. Y., & Xiang, Y. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2885561 · Cited by 331 · see citing works
Guide to Operational Technology (OT) security
Stouffer, K., Pease, M., Tang, C., Zimmerman, T., Pillitteri, V., Lightman, S., Hahn, A., Saravia, S., Sherule, A., & Thompson, M. (2023) · doi:10.6028/nist.sp.800-82r3 · Cited by 315 · see citing works
Securing the Internet of Things: Challenges, threats and solutions
Radoglou Grammatikis, P. I., Sarigiannidis, P. G., & Moscholios, I. D. (2019) · Internet of Things · doi:10.1016/j.iot.2018.11.003 · Cited by 308 · see citing works
Guide to Cyber Threat Information Sharing
Johnson, C. S., Badger, M. L., Waltermire, D., Snyder, J., & Skorupka, C. (2016) · doi:10.6028/nist.sp.800-150 · Cited by 293 · see citing works
A survey of information security incident handling in the cloud
Rahman, N. H. A., & Choo, K. R. (2014) · Computers & Security · doi:10.1016/j.cose.2014.11.006 · Cited by 201 · see citing works
Coronavirus and Migration: Analysis of Human Mobility and the Spread of Covid-19
Sirkeci, İ., & Yüceşahin, M. M. (2020) · MIGRATION LETTERS · doi:10.33182/ml.v17i2.935 · Cited by 159 · see citing works
Incident response recommendations and considerations for cybersecurity risk management :
Nelson, A. J., Rekhi, S. J., Souppaya, M., & Scarfone, K. A. (2025) · doi:10.6028/nist.sp.800-61r3 · Cited by 141 · see citing works
Self-citationRufini, A., Agostini, M., Grespi, F., Tomasini, R., Sayan, B. S., Niklison-Chirou, M. V., Conforti, F., Velletri, T., Mastino, A., Mak, T. W., et al. (2011) · Genes & Cancer · doi:10.1177/1947601911408890 · Cited by 138 · see citing works
Parvin, N., Joo, S., Jung, J. H., & Mandal, T. K. (2025) · Nanomaterials · doi:10.3390/nano15120895 · Cited by 130 · see citing works
Application container security guide
Souppaya, M., Morello, J., & Scarfone, K. A. (2017) · doi:10.6028/nist.sp.800-190 · Cited by 120 · see citing works
Self-citationSmart Substation Communications and Cybersecurity: A Comprehensive Survey
Gaspar, J., Cruz, T., Lam, C., & Simões, P. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3305468 · Cited by 114 · see citing works
Radanliev, P. (2024) · Journal of Cyber Security Technology · doi:10.1080/23742917.2024.2312671 · Cited by 108 · see citing works
Organizational science and cybersecurity: abundant opportunities for research at the interface
Dalal, R. S., Howard, D., Bennett, R. J., Posey, C., Zaccaro, S. J., & Brummel, B. J. (2021) · Journal of Business and Psychology · doi:10.1007/s10869-021-09732-9 · Cited by 105 · see citing works
Salvi, A., Spagnoletti, P., & Noori, N. S. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102507 · Cited by 103 · see citing works
Information security incident management: Current practice as reported in the literature
Tøndel, I. A., Line, M. B., & Jaatun, M. G. (2014) · Computers & Security · doi:10.1016/j.cose.2014.05.003 · Cited by 102 · see citing works
A Common Process Model for Incident Response and Computer Forensics.
Freiling, F., & Schwittay, B. (2007) · Cited by 95 · see citing works
A case analysis of information systems and security incident responses
Ahmad, A., Maynard, S. B., & Shanks, G. (2015) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2015.08.001 · Cited by 94 · see citing works
Taxonomy of Challenges for Digital Forensics
Karie, N. M., & Venter, H. S. (2015) · Journal of Forensic Sciences · doi:10.1111/1556-4029.12809 · Cited by 83 · see citing works
Guide for cybersecurity event recovery
Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G., & Scarfone, K. A. (2016) · doi:10.6028/nist.sp.800-184 · Cited by 81 · see citing works
Self-citationIdentifying factors of “organizational information security management”
Singh, A., Gupta, M. P., & Ojha, A. (2014) · Journal of Enterprise Information Management · doi:10.1108/jeim-07-2013-0052 · Cited by 77 · see citing works
A Semantic Approach to Cloud Security and Compliance
Hendre, A., & Joshi, K. P. (2015) · IEEE ... International Conference on Cloud Computing · doi:10.1109/cloud.2015.157 · Cited by 75 · see citing works
On Incident Handling and Response: A state-of-the-art approach
Mitropoulos, S., Patsos, D., & Douligeris, C. (2006) · Computers & Security · doi:10.1016/j.cose.2005.09.006 · Cited by 73 · see citing works
Protecting controlled unclassified information in nonfederal systems and organizations
Ross, R., Pillitteri, V. Y., Dempsey, K. L., Riddle, M., & Guissanie, G. (2020) · doi:10.6028/nist.sp.800-171r2 · Cited by 73 · see citing works
Information Security Risk Assessment Methods in Cloud Computing: Comprehensive Review
Ali, T., Al-Khalidi, M., & Al-Zaidi, R. (2024) · Journal of Computer Information Systems · doi:10.1080/08874417.2024.2329985 · Cited by 72 · see citing works
Enhancing Cybersecurity in Smart Grids: False Data Injection and Its Mitigation
Unsal, D. B., Ustun, T. S., Hussain, S. M. S., & Önen, A. (2021) · Energies · doi:10.3390/en14092657 · Cited by 64 · see citing works
Empirical Measurement of Perceived Privacy Risk
Bhatia, J., & Breaux, T. D. (2018) · ACM Transactions on Computer-Human Interaction · doi:10.1145/3267808 · Cited by 61 · see citing works
Internet Denial of Service Attacks and Defense Mechanisms
Abliz, M. (2011) · Cited by 59 · see citing works
Shielding IoT against Cyber‐Attacks: An Event‐Based Approach Using SIEM
López, D. D., Uribe, M. A. B., Cely, C. P. S., Torres, A. V., Guataquira, N. M., de Castro, S. K. V., Nespoli, P., & Mármol, F. G. (2018) · Wireless Communications and Mobile Computing · doi:10.1155/2018/3029638 · Cited by 59 · see citing works
Cyber incident response and planning: a flexible approach
Shinde, N., & Kulkarni, P. (2021) · Computer Fraud & Security · doi:10.1016/s1361-3723(21)00009-9 · Cited by 58 · see citing works
EARS to cyber incidents in health care
Jalali, M. S., Russell, B., Razak, S., & Gordon, W. J. (2018) · Journal of the American Medical Informatics Association · doi:10.1093/jamia/ocy148 · Cited by 58 · see citing works
A framework for incident response management in the petroleum industry
Jaatun, M. G., Albrechtsen, E., Line, M. B., Tøndel, I. A., & Longva, O. H. (2009) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2009.02.004 · Cited by 57 · see citing works
CRUSOE: A toolset for cyber situational awareness and decision support in incident handling
Husák, M., Sadlek, L., Špaček, S., Laštovička, M., Javorník, M., & Komárková, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102609 · Cited by 56 · see citing works
SOTER: A Playbook for Cybersecurity Incident Management
Onwubiko, C., & Ouazzane, K. (2020) · IEEE Transactions on Engineering Management · doi:10.1109/tem.2020.2979832 · Cited by 56 · see citing works
Naseer, H., Desouza, K. C., Maynard, S. B., & Ahmad, A. (2023) · European Journal of Information Systems · doi:10.1080/0960085x.2023.2257168 · Cited by 54 · see citing works
Integrated Network and Security Operation Center: A Systematic Analysis
Shahjee, D., & Ware, N. R. (2022) · IEEE Access · doi:10.1109/access.2022.3157738 · Cited by 52 · see citing works
Efijemue, O., Obunadike, C., Olisah, S., Esther, T., Somto, K.-A., Odooh, C., & Ejimofor, I. (2023) · International Journal on Soft Computing · doi:10.5121/ijsc.2023.14301 · Cited by 52 · see citing works
How to exchange security events? Overview and evaluation of formats and protocols
Steinberger, J., Sperotto, A., Golling, M., & Baier, H. (2015) · IFIP/IEEE International Symposium on Integrated Network Management (IM) · doi:10.1109/inm.2015.7140300 · Cited by 52 · see citing works
The impact of repeated data breach events on organisations’ market value
Schatz, D., & Bashroush, R. (2016) · Information and Computer Security · doi:10.1108/ics-03-2014-0020 · Cited by 51 · see citing works
Cyber resilience recovery model to combat zero-day malware attacks
Tran, H. M., Campos-Náñez, E., Fomin, P., & Wasek, J. S. (2016) · Computers & Security · doi:10.1016/j.cose.2016.05.001 · Cited by 51 · see citing works
Small Business Information Security: The Fundamentals
Paulsen, C., & Toth, P. (2016) · doi:10.6028/nist.ir.7621r1 · Cited by 49 · see citing works
Cognitive Triaging of Phishing AttacksPreprint
van der Heijden, A., & Allodi, L. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.02162 · Cited by 49 · see citing works
Karabacak, B., Yildirim, S. O., & Baykal, N. (2016) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2016.10.001 · Cited by 48 · see citing works
A comparative analysis of incident reporting formats
Menges, F., & Pernul, G. (2017) · Computers & Security · doi:10.1016/j.cose.2017.10.009 · Cited by 46 · see citing works
Zhao, Y., Huang, L., Smidts, C. S., & Zhu, Q. (2020) · Reliability Engineering & System Safety · doi:10.1016/j.ress.2020.106878 · Cited by 46 · see citing works
Naseer, A., Naseer, H., Ahmad, A., Maynard, S. B., & Siddiqui, A. M. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103525 · Cited by 45 · see citing works
Patterson, C. M., Nurse, J. R. C., & Franqueira, V. N. L. (2024) · Computers & Security · doi:10.1016/j.cose.2023.103699 · Cited by 45 · see citing works
Denial of service attacks, defences and research challenges
Zlomislić, V., Fertalj, K., & Sruk, V. (2017) · Cluster Computing · doi:10.1007/s10586-017-0730-x · Cited by 45 · see citing works
A Formal Approach Enabling Risk-Aware Business Process Modeling and Simulation
Tjoa, S. (2010) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2010.17 · Cited by 45 · see citing works
Computer Security Incident Response Team Effectiveness: A Needs Assessment
van der Kleij, R., Kleinhuis, G., & Young, H. (2017) · Frontiers in Psychology · doi:10.3389/fpsyg.2017.02179 · Cited by 44 · see citing works
A Comprehensive Review and Assessment of Cybersecurity Vulnerability Detection Methodologies
Bennouk, K., Aali, N. A., Idrissi, Y. E. B. E., Sebai, B., Faroukhi, A. Z., & Mahouachi, D. (2024) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp4040040 · Cited by 41 · see citing works
Malware in the future? Forecasting of analyst detection of cyber events
Bakdash, J. Z., Hutchinson, S. E., Zaroukian, E. G., Marusich, L. R., Thirumuruganathan, S., Sample, C., Hoffman, B., & Das, G. (2018) · Journal of Cybersecurity · doi:10.1093/cybsec/tyy007 · Cited by 40 · see citing works
A New Network Model for Cyber Threat Intelligence Sharing using Blockchain Technology
Homan, D., Shiel, I., & Thorpe, C. (2019) · IFIP International Conference on New Technologies, Mobility and Security (NTMS) · doi:10.1109/ntms.2019.8763853 · Cited by 39 · see citing works
Managing the Inevitable – A Maturity Model to Establish Incident Response Management Capabilities
Bitzer, M., Häckel, B. S., Leuthe, D., Ott, J., Stahl, B., & Strobel, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.103050 · Cited by 38 · see citing works
CSIRT s and Global Cybersecurity: How Technical Experts Support Science Diplomacy
Tanczer, L. M., Brass, I., & Carr, M. (2018) · Global Policy · doi:10.1111/1758-5899.12625 · Cited by 38 · see citing works
Linking Cybersecurity and Accounting: An Event, Impact, Response Framework
Janvrin, D. J., & Wang, T. (2021) · Accounting Horizons · doi:10.2308/horizons-2020-101 · Cited by 37 · see citing works
Shedden, P., Ahmad, A., & Ruighaver, A. B. (2010) · Australasian Journal of Paramedicine · doi:10.4225/75/57b6771734788 · Cited by 37 · see citing works
Real-time behavioral DGA detection through machine learning
Bisio, F., Saeli, S., Lombardo, P., Bernardi, D., Perotti, A., & Massa, D. (2017) · IEEE International Carnahan Conference on Security Technology (ICCST) · doi:10.1109/ccst.2017.8167790 · Cited by 37 · see citing works
eMUD: Enhanced Manufacturer Usage Description for IoT Botnets Prevention on Home WiFi Routers
Sajjad, S. M., Yousaf, M., Afzal, H., & Mufti, M. R. (2020) · IEEE Access · doi:10.1109/access.2020.3022272 · Cited by 36 · see citing works
Bartnes, M., Moe, N. B., & Heegaard, P. E. (2016) · Computers & Security · doi:10.1016/j.cose.2016.05.004 · Cited by 36 · see citing works
(2015) · Elsevier eBooks · doi:10.1016/c2014-0-00456-x · Cited by 35 · see citing works
An overview of computer forensics
Dixon, P. D. (2005) · IEEE Potentials · doi:10.1109/mp.2005.1594001 · Cited by 35 · see citing works
Thangavelu, M., Krishnaswamy, V., & Sharma, M. K. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102401 · Cited by 34 · see citing works
A Novel Intrusion Detection and Prevention Scheme for Network Coding-Enabled Mobile Small Cells
Parsamehr, R., Esfahani, A., Μαντάς, Γ., Radwan, A., Mumtaz, S., Rodrı́guez, J., & Martínez-Ortega, J.-F. (2019) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2019.2949153 · Cited by 33 · see citing works
A Review of Security Awareness Approaches With Special Emphasis on Gamification
Sharif, K. H., & Ameen, S. Y. (2020) · International Conference on Advanced Science and Engineering (ICOASE) · doi:10.1109/icoase51841.2020.9436595 · Cited by 33 · see citing works
Agile incident response (AIR): Improving the incident response process in healthcare
He, Y., Zamani, E. D., Lloyd, S., & Luo, C. (2021) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2021.102435 · Cited by 33 · see citing works
Evaluating SLIM-based human error probability for ECDIS cybersecurity in maritime
Kayışoğlu, G., Bolat, P., & Tam, K. (2022) · Journal of Navigation · doi:10.1017/s0373463322000534 · Cited by 33 · see citing works
Mitigating cybercrimes in an evolving organizational landscape
Yeboah-Ofori, A., & Opoku-Boateng, F. A. (2023) · Continuity & Resilience Review · doi:10.1108/crr-09-2022-0017 · Cited by 33 · see citing works
Grispos, G., Glisson, W. B., & Storer, T. (2019) · Hawaii International Conference on System Sciences (HICSS) · doi:10.24251/hicss.2019.859 · Cited by 33 · see citing works
Security analysis of SDN controller-based DHCP services and attack mitigation with DHCPguard
Tok, M. S., & Demirci, M. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102394 · Cited by 31 · see citing works
Khurana, H., Basney, J., Bakht, M., Freemon, M., Welch, V., & Butler, R. (2009) · Identity and Trust on the Internet · doi:10.1145/1527017.1527023 · Cited by 31 · see citing works
He, Y., & Johnson, C. (2017) · Informatics for Health and Social Care · doi:10.1080/17538157.2016.1255629 · Cited by 30 · see citing works
Papastergiou, S., Mouratidis, H., & Kalogeraki, E.-M. (2019) · Communications in computer and information science · doi:10.1007/978-3-030-20257-6_41 · Cited by 30 · see citing works
Papastergiou, S., Mouratidis, H., & Kalogeraki, E.-M. (2020) · Evolving Systems · doi:10.1007/s12530-020-09335-4 · Cited by 30 · see citing works
The THREAT-ARREST Cyber Range Platform
Hatzivasilis, G., Ioannidis, S., Smyrlis, M., Spanoudakis, G., Frati, F., Braghin, C., Damiani, E., Koshutanski, H., Tsakirakis, G., Hildebrandt, T., et al. (2021) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr51186.2021.9527963 · Cited by 30 · see citing works
Ross, R., Pillitteri, V. Y., Guissanie, G., WAGNER, R., Graubart, R. D., & Bodeau, D. J. (2021) · doi:10.6028/nist.sp.800-172 · Cited by 30 · see citing works
Chu, A. M. Y., & So, M. K. P. (2020) · Sustainability · doi:10.3390/su12083163 · Cited by 29 · see citing works
Schlette, D., Vielberth, M., & Pernul, G. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102482 · Cited by 29 · see citing works
Studying Analysts’ Data Triage Operations in Cyber Defense Situational Analysis
Zhong, C., Yen, J., Liu, P., Erbacher, R., Garneau, C. J., & Chen, B. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-61152-5_6 · Cited by 29 · see citing works
Security Incident Response Criteria: A Practitioner's PerspectivePreprint
Grispos, G., Glisson, W. B., & Storer, T. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1508.02526 · Cited by 28 · see citing works
Analytical Review of Cybersecurity for Embedded Systems
Aloseel, A., He, H., Shaw, C., & Khan, M. (2020) · IEEE Access · doi:10.1109/access.2020.3045972 · Cited by 27 · see citing works
Implications of traffic signal cybersecurity on potential deliberate traffic disruptions
Perrine, K. A., Levin, M. W., Yahia, C. N., Duell, M., & Boyles, S. D. (2018) · Transportation Research Part A Policy and Practice · doi:10.1016/j.tra.2018.12.009 · Cited by 26 · see citing works
Human Capital Acquisition in Response to Data Breaches
Bana, S., Brynjolfsson, E., Jin, W., Steffen, S., & Wang, X. (2024) · MIS Quarterly · doi:10.25300/misq/2024/18352 · Cited by 26 · see citing works
Waelchli, S., & Walter, Y. (2024) · Computers & Security · doi:10.1016/j.cose.2024.104137 · Cited by 25 · see citing works
Parsamehr, R., Μαντάς, Γ., Rodrı́guez, J., & Martínez-Ortega, J.-F. (2020) · IEEE Access · doi:10.1109/access.2020.2977428 · Cited by 25 · see citing works
Detection and Blockchain‐Based Collaborative Mitigation of Internet of Things Botnets
Sajjad, S. M., Mufti, M. R., Yousaf, M., Aslam, W., Alshahrani, R., Nemri, N., Afzal, H., Khan, M. A., & Chen, C. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/1194899 · Cited by 25 · see citing works
Development and validation of technique to measure cyber situation awareness
Lif, P., Granåsen, M., & Sommestad, T. (2017) · International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA) · doi:10.1109/cybersa.2017.8073388 · Cited by 25 · see citing works
Protecting controlled unclassified information in nonfederal systems and organizations
Ross, R., & Pillitteri, V. (2024) · doi:10.6028/nist.sp.800-171r3 · Cited by 25 · see citing works
Try to esCAPE from Cybersecurity Incidents! A Technology-Enhanced Educational Approach
Pirta-Dreimane, R., Brilingaitė, A., Roponena, E., Parish, K., Grabis, J., Lugo, R. G., & Bonders, M. (2024) · Technology Knowledge and Learning · doi:10.1007/s10758-024-09769-8 · Cited by 24 · see citing works
Review of Human Decision-making during Computer Security Incident Analysis
Spring, J., & Illari, P. K. (2021) · Digital Threats Research and Practice · doi:10.1145/3427787 · Cited by 24 · see citing works
Enterprise Architecture Frameworks Assessment: Capabilities, Cyber Security and Resiliency Review
Al-Turkistani, H. F., Aldobaian, S., & Latif, R. (2021) · International Conference on Artificial Intelligence and Data Analytics (CAIDA) · doi:10.1109/caida51941.2021.9425343 · Cited by 24 · see citing works
The Incident Object Description Exchange Format Version 2
Danyliw, R. (2016) · doi:10.17487/rfc7970 · Cited by 24 · see citing works
Privacy Risk in Cybersecurity Data Sharing
Bhatia, J., Breaux, T. D., Friedberg, L., Hibshi, H., & Smullen, D. (2016) · doi:10.1145/2994539.2994541 · Cited by 23 · see citing works
Enhancing security incident response follow-up efforts with lightweight agile retrospectives
Grispos, G., Glisson, W. B., & Storer, T. (2017) · Digital Investigation · doi:10.1016/j.diin.2017.07.006 · Cited by 23 · see citing works
Cyber Crisis Management: A Decision-Support Framework for Disclosing Security Incident Information
Kulikova, O., Heil, R., van den Berg, J., & Pieters, W. (2012) · doi:10.1109/cybersecurity.2012.20 · Cited by 23 · see citing works
Lightman, S., Suloway, T., & Brule, J. (2022) · doi:10.6028/nist.ir.8401.ipd · Cited by 23 · see citing works
Securing the Digital Supply Chain Cyber Threats and Vulnerabilities
Sindiramutty, S. R., Jhanjhi, N. Z., Tan, C. E., Khan, N. A., Shah, B., & Gaur, L. (2023) · Advances in logistics, operations, and management science book series · doi:10.4018/978-1-6684-7625-3.ch007 · Cited by 22 · see citing works
- Authors
- Cichonski, P., Millar, T., Grance, T., & Scarfone, K.
- Affiliations
- National Institute of Standards and Technology (US)
- United States Department of Homeland Security (US)
- ORCID
- Scarfone, Karen
- Published
- 2012-08
- OpenAlex
- W2617200927
- Cited by
- 485
- References
- 2
- Citations by year
- 2026: 25 · 2025: 37 · 2024: 38 · 2023: 33 · 2022: 43 · 2021: 44 · 2020: 40 · 2019: 26 · 2018: 26 · 2017: 21 · 2016: 20 · 2015: 31 · 2014: 23 · 2013: 11 · 2012: 19
- Type
- report
- Language
- en
- Update notices
- new_version (2025-04-03)
- Open access
- gold
- doi.org
- Licence
- public-domain
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Keywords
- incident response, information security management, FISMA, NIST guidelines, federal information systems, information security standards
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
