The DOI matches its Crossref record, with a small difference in title or year; 2 of the 2 references it cites were found in a registry or an index.
Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology
Open accessAbstract
This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347.NIST is responsible for developing information security standards and guidelines, including minimum requirements for Federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate Federal officials exercising policy authority over such systems.This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130, Section 8b(3), Securing Agency Information Systems, as analyzed in Circular A-130, Appendix IV: Analysis of Key Sections.Supplemental information is provided in Circular A-130, Appendix III, Security of Federal Automated Information Resources.Nothing in this publication should be taken to contradict the standards and guidelines made mandatory and binding on Federal agencies by the Secretary of Commerce under statutory authority.Nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, Director of the OMB, or any other Federal official.This publication may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright in the United States.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“When these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Cichonski et al., 2012
In the citing paper
“The standards serve as frameworks to develop secure networks and can be used as guides and best practice definitions [84].”
From Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure. (2023) · cites this paper as [84]
Citations
Cites
Guide to test, training, and exercise programs for IT plans and capabilities
Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006) · doi:10.6028/nist.sp.800-84 · Cited by 41
Self-citationRecommended security controls for federal information systems and organizations
Ross, R., Katzke, S. W., Johnson, L. A., Swanson, M., Stoneburner, G., & Rogers, G. (2007) · doi:10.6028/nist.sp.800-53r2 · Cited by 8
Cited by
Sorted by citations
Items 401–500 of 534
Cybersecurity Profile for the Responsible Use of Positioning, Navigation and Timing (PNT) Services
Bartock, M., Brule, J., Li-Baboud, Y.-S., Lightman, S., McCarthy, J., Reczek, K. K., Northrip, D., Scholz, A., & Suloway, T. (2020) · doi:10.6028/nist.ir.8323-draft · Cited by 1
RetractedPosition Papers of the 17th Conference on Computer Science and Intelligence Systems
(2022) · Annals of Computer Science and Information Systems · doi:10.15439/978-83-965897-2-9 · Cited by 1
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Ross, R., & Pillitteri, V. Y. (2023) · doi:10.6028/nist.sp.800-171r3.fpd · Cited by 1
RetractedThe Incident Prevention Team: A proactive approach to Information Security
Pereira, N. M. D. C. M. (2015) · Research Repository (Delft University of Technology) · Cited by 1
Visualization for information system security monitoring
Crémilleux, D. (2019) · doi:10.70675/1049b71cz545fz4ddazb314z9b8529557c3c · Cited by 1
Gordeychik, S. (2026) · doi:10.24108/preprints-3115766 · Cited by 1
Yagiz, M. A., Horasan, F., & Yurttakal, A. H. (2026) · arXiv · doi:10.48550/arxiv.2605.00065
Towards an aligned organization on information security
Roeling, M. H. F. (2012) · Utrecht University Repository (Utrecht University)
Organisational Pattern Driven Recovery Mechanisms
Giacomo, V. D., Presenza, D., & Riccucci, C. (2009) · Advances in information security · doi:10.1007/978-0-387-88775-3_15
Design of a Forecasting Service System for Monitoring of Vulnerabilities of Sensor Networks
Song, J.-G., Kim, J. H., Seo, D. I., & Kim, S. (2010) · Communications in computer and information science · doi:10.1007/978-3-642-16444-6_5
Planning for Incident Response
Lincke, S. (2015) · Springer eBooks · doi:10.1007/978-3-319-16027-6_11
Pan, J., & Fung, C. C. (2012) · Murdoch University Research Portal
de Wit, J. (2013)
Benchmarking CSIRT work processes
Kjærem, I. (2005) · NORA - Norwegian Open Research Archives
Hendelsesrapportering i en organisasjon i norsk olje- og gassindustri
Smedstad, I. (2007) · NORA - Norwegian Open Research Archives
Roman, A. V. (2015) · IGI Global eBooks · doi:10.4018/978-1-4666-8358-7.ch096
A near-miss analysis model for improving the forensic investigation of software failures
Bella, M. B. (2014) · UpSpace Institutional Repository (University of Pretoria)
Facilitating Rapid Response with a Relational Indicator Database Schema and Client Agents
Batchelor, J. (2010) · RIT Scholar Works (Rochester Institute of Technology)
Evaluation on Malware Classification by Session Sequence of Common Protocols
Hiruta, S., Yamaguchi, Y., Shimada, H., Takakura, H., Yagi, T., & Akiyama, M. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-48965-0_31
Security Template for structuring the lessons from information security incidents
He, Y., Renaud, K., Lu, Y., & Jebriel, S. M. (2014)
Human Sensor Web Crowd Sourcing Security Incidents Management in Tanzania Context
Mshangi, M., Nfuka, E. N., & Sanga, C. A. (2018) · Journal of Information Security · doi:10.4236/jis.2018.93014
Speculating Incident Zone System on Local Area Networks
Hasumi, D., Shima, S., & Takakura, H. (2018) · doi:10.1145/3229598.3229603
Security Incident Information Exchange for Cloud Service Provisioning Chains
Frøystad, C., Tøndel, I. A., & Jaatun, M. G. (2018) · Cryptography · doi:10.3390/cryptography2040041
Taylor, L., & Shepherd, M. (2007) · Elsevier eBooks · doi:10.1016/b978-159749116-7/50016-0
Forensics enabled secure mobile computing system for enterprises
Govindaraj, J., Gupta, G., & Chang, D. (2018) · INFLIBNET
Domain Generation Algorithm Detection Techniques through Network Analysis and Machine Learning
Bisio, F., Saeli, S., & Massa, D. (2019) · CRC Press eBooks · doi:10.1201/9780429329913-8
Safety and Security Design Processes
Wolf, M., & Serpanos, D. N. (2019) · Springer eBooks · doi:10.1007/978-3-030-25808-5_2
A Virtual & Pragmatic Analysis on Networked Security Incident, its Handling & Reporting Measures
Panigrahi, G. R., Barpanda, N. K., & Panda, M. (2020) · International Conference on Computer Science, Engineering and Applications (ICCSEA) · doi:10.1109/iccsea49143.2020.9132951
Towards a cybersecurity framework for South African e-retail organisations
Jideani, P. C. (2018)
Conrad, E., Misenar, S., & Feldman, J. (2012) · Elsevier eBooks · doi:10.1016/b978-1-59749-961-3.00004-2
Conrad, E., Misenar, S., & Feldman, J. (2012) · Elsevier eBooks · doi:10.1016/b978-1-59749-961-3.00008-x
Cybercrime and Incident Response
Besas, E. (2020)
NERD: Neural Network for Edict of Risky Data StreamsPreprint
Hillmann, P., Passarelli, S., Cem, G., Stiemert, L., & Schopp, M. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4864049
RCAP Solutions Breach Management - Case Study
Adu-Gyamfi, E., Muarrawi, G. A., & Ofori, K. S. (2020) · Clark Digital Commons (Clark University)
Research on Life Cycle Model of Data for Handling Big Data-Based Security Incident
Kim, M. (2021) · Lecture notes in electrical engineering · doi:10.1007/978-981-33-6385-4_9
Evaluación de la gestión de incidentes en seguridad de la información para entidades financieras
Rojas, P. A. M., Murcia, D. S. B., & Ramírez, S. A. (2016)
Assessment System for Residual Risks of Information Leakage in Incident Countermeasures
Noda, T., Hasegawa, H., & Takakura, H. (2021) · International Conference on Information Science and Systems (ICISS) · doi:10.1145/3459955.3460598
Cybersecurity Incident Response and Management
(2020) · Advances in digital crime, forensics, and cyber terrorism book series · doi:10.4018/978-1-7998-4162-3.ch002
Security Incident Classification Applied to Automated Decisions Using Machine Learning
Pacheco, E. E. L., Sosa, M. L. D., Elizondo, C. C. D., Torres-Ruiz, M. J., & Pacheco, D. L. L. (2021) · Communications in computer and information science · doi:10.1007/978-3-030-89586-0_3
Candil, Anthony J. Tank Combat in Spain: Armored Warfare during the Spanish Civil War 1936-1939
Searle, A. (2021) · History Reviews of New Books · doi:10.1080/03612759.2021.1986788
Østby, G., & Kowalski, S. J. (2021) · NORA - Norwegian Open Research Archives
Revealing and Sharing Malware Profile Using Malware Threat Intelligence Platform
Djufri, F. I., & Lim, C. (2021) · ACMIT Proceedings · doi:10.33555/acmit.v6i1.100
Developing a Military Cyber Maturity Model for Multi-Domain Battle Mission Resilience and Success
Ormrod, D., & Turnbull, B. (2020) · IGI Global eBooks · doi:10.4018/978-1-7998-2466-4.ch009
Cybersecurity: Incident Response
Maras, M. (2021) · Springer eBooks · doi:10.1007/978-3-319-70488-3_301
Information and Communications Technology and Renewable Energy Monitoring
Alani, O., Qasim, A. Y., & Al-Douri, Y. (2022) · doi:10.1063/9780735424272_010
Renewable Energy and Nanotechnology
Al-Douri, Y., Jose, R., Qasim, A. Y., & Alani, O. (2022) · doi:10.1063/9780735424272_004
Qasim, A. Y., Al-Douri, Y., & Alani, O. (2022) · doi:10.1063/9780735424272_006
Cybercrime and Private Health Data
Pitoglou, S., Giannouli, D., Costarides, V., Ανδρούτσου, Θ., & Αναστασίου, Α. (2022) · IGI Global eBooks · doi:10.4018/978-1-6684-6311-6.ch047
White, G. (2022) · Comedy Studies · doi:10.1080/2040610x.2022.2149362
Game-Theoretic Design of Response Systems
Smidts, C. S., Ray, I., Zhu, Q., Vaddi, P. K., Zhao, Y., Huang, L., Diao, X., Talukdar, R., & Pietrykowski, M. C. (2022) · SpringerBriefs in computer science · doi:10.1007/978-3-031-12711-3_4
Planning for Incident Response
Lincke, S. (2024) · Springer eBooks · doi:10.1007/978-3-031-43118-0_13
Preparing for Forensic Analysis
Lincke, S. (2024) · Springer eBooks · doi:10.1007/978-3-031-43118-0_16
Tjoa, S., Gafić, M., & Kieseberg, P. (2024) · Studies in systems, decision and control · doi:10.1007/978-3-031-52064-8_8
Detection and Prevention of Cyberattacks in Healthcare
Sharma, D. P., Lashkari, A. H., & Parizadeh, M. (2024) · Progress in IS · doi:10.1007/978-3-031-68034-2_7
Potential Cyber Threats to the National Elections in the Digital Age in Africa
Mkhwanazi, T., Shibambu, A., Nefale, V., Mtsweni, J., Phahlamohlaka, J., Mutemwa, M., & Nelufule, N. (2025) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-81570-6_22
Government Cloud Security: Leveraging AI to Protect Sensitive Data and Critical Infrastructure
Aladiyan, A. (2025) · International Journal of Engineering and Advanced Technology Studies · doi:10.37745/ijeats.13/vol13n24756
An Exemplar Incident Response Plan for Security Operations Centre Analysts
Agyepong, E., & Onwubiko, C. (2025) · Springer proceedings in complexity · doi:10.1007/978-981-96-0401-2_7
The Role of Cyber Incident Response Plans in Securing Higher Education Institutions
Graham, T., Bennett, D., Jones, J., Coote, S., & Lawrence, J. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-86637-1_20
Analyzing Systemic Failures in IT Incident Management: Insights from Post-Mortem Analysis
Arifiansyah, F., & Handayati, Y. (2025) · Eduvest - Journal Of Universal Studies · doi:10.59188/eduvest.v5i4.51031
Analyses And Investigation Of 0-Day Threats With Fireeye
Rakov, M., & Stoyanova, V. (2025) · Engineering Sciences · doi:10.7546/engsci.lxii.25.01.01
Dorner, C., & Lang-Muhr, C. (2025) · IEEE Global Engineering Education Conference (EDUCON) · doi:10.1109/educon62633.2025.11016620
Romadhon, F. W., & Salman, M. (2025) · Jurnal Pendidikan dan Teknologi Indonesia · doi:10.52436/1.jpti.715
Enhancing Cyber Threat Intelligence (CTI) Exchange: A Governance Model for the DYNAMO Platform
Rajamäki, J., Nepal, A., & Chalkias, I. (2025) · European Conference on Cyber Warfare and Security · doi:10.34190/eccws.24.1.3395
Towards a Situational Aware-Based Cybersecurity Remediation
Kanawati, R., Lammari, N., Faci, A., & Mimouni, N. (2025) · HAL · doi:10.1109/ntms65597.2025.11076705
An Incident Response Playbook Guide for Small and Medium Enterprises (SMEs)
Odozor, L. A., Omini, L., Berko, S. N., Precious, U., Nitzan, Y., & Idowu, K. (2025) · International Journal of Scientific and Management Research · doi:10.37502/ijsmr.2025.8712
C2 Networks: The Invisible Threat in Your Infrastructure
Donadze, G., & Zakaraia, V. (2025) · International Journal of Scientific Research in Computer Science Engineering and Information Technology · doi:10.32628/cseit25111794
An Alignment Between the CRA’s Essential Requirements and the ATT&CK®’s Mitigations
Ruohonen, J., Kang, E.-Y., & Ramadan, Q. (2025) · IEEE International Requirements Engineering Conference Workshops (REW) · doi:10.1109/rew66121.2025.00033
AI-driven ETL Optimization for Security and Performance Tuning in Big Data Architectures
-, S. K. V. (2025) · International Journal of Leading Research Publication. · doi:10.70528/ijlrp.v6.i5.1548
Comprehensive Analysis for Integrated Public Systems in Sustainable Urban
Velásquez, R. M. A., Daza, M. A. M., Bellido, C. J. P. I., & Melgarejo, D. M. (2025) · Lecture notes in networks and systems · doi:10.1007/978-3-032-00715-5_1
Artificial Intelligence and Machine Learning in Cybersecurity
Richard Gwashy Young, P. (2025) · Productivity Press eBooks · doi:10.4324/9781003615026
Nagaraju, S., Pathi, N. K., & Agarwal, R. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-95-0681-1_3
Herdiani, M. M., Utomo, R. G., & Achmad, K. A. (2025) · International Conference on Software Engineering and Information Technology (ICoSEIT) · doi:10.1109/icoseit67010.2025.11290787
Barrero, D. R. (2011)
コンピュータセキュリティインシデント対応の自動化に関する研究
大森, 幹. (2022) · Institutional Repositories DataBase (IRDB)
Implementation of an Educational CSIRT at the Central University of Ecuador
Reyes, N. E. S. (2026) · Smart innovation, systems and technologies · doi:10.1007/978-3-032-10947-7_15
Reyes, N. E. S., & Rivera-Guaman, J. (2025) · Smart innovation, systems and technologies · doi:10.1007/978-981-95-1365-9_23
Criminological Cybercompliance to Transform Digital Routines and Strengthen Organizational ControlPreprint
Camacho, S. S. (2026) · CrimRxiv · doi:10.21428/cb6ab371.5d7e6183
Fauzan, F., Fakhruddin, M. H., Sitorus, A. T., & Samroh, S. (2026) · RIGGS Journal of Artificial Intelligence and Digital Business · doi:10.31004/riggs.v4i4.5773
Narayanan, S. N. S. (2023) · INTERNATIONAL JOURNAL OF COMPUTER ENGINEERING & TECHNOLOGY · doi:10.34218/ijcet_14_01_021
Bogdan, H. A., & Trokhymchuk, D. V. (2025) · Collection of Scientific Publications NUS · doi:10.15589/znp2025.4(502).25
Implementing Effective Strategies for Data Privacy and Security in Techstrat Fusion
Goyal, R., Kumar, T., Gupta, G., & Agarwal, R. (2025) · Emerald Group Publishing Limited eBooks · doi:10.1108/978-1-83708-460-920251012
Akhiiezer, О., & Kramskyi, A. (2026) · Наука і техніка сьогодні · doi:10.52058/2786-6025-2026-2(56)-2451-2464
Platform Engineering in Regulated Finance: Self-Service Without Losing Control
Agade, A. D., & Balpande, S. (2025) · International journal of innovative research and creative technology · doi:10.62970/ijirct.v11.i3.2603029
Predictors of Phishing Detection Confidence among Defense Engineering Professionals
Brickley, J. C., Thakur, K., & Krantz, M. (2026) · Journal of Computer and Communications · doi:10.4236/jcc.2026.143010
Yashchuk, V., Tkachenko, A., & Dmytruk, B. (2026) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2026.32.1094
Sanubala, K. C. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-17843-5_22
Cybersecurity incident management in local government units
Czternastek, M., Ciekanowski, Z., Żurawski, S. K., & Wyrębek, H. (2026) · Journal of Modern Science · doi:10.13166/jms/218199
GPT Model for Incident Response
Goh, T. A., Chiam, J. T., Chew, Z., Chee, C. X. L., Li, P., & Guo, H. (2026) · IEEE SoutheastCon · doi:10.1109/southeastcon63549.2026.11476053
Nakayama, K., Watanabe, K., & Koshijima, I. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-19540-1_15
Prokopovych-Tkachenko, D., Torstensson, O., Черкаський, Д. О., Переметчик, Д. О., & Bert, S. D. (2026) · Scientific notes of Taurida National V I Vernadsky University Series Technical Sciences · doi:10.32782/2663-5941/2026.2.1/36
AI-Driven Zero Trust Architecture for Industrial IoT-Hybrid Cloud Convergence
Ghosh, S., & Raj, D. R. (2026) · IGI Global eBooks · doi:10.4018/979-8-3373-4581-9.ch016
Analisis Deteksi Dini Serangan Sosial Engineering Menggunakan NIST Cybersecurity Framework
Naufal, F. M., Ardiansyah, R., & Imelda (2026) · Jurnal Algoritma · doi:10.33364/algoritma/v.23-1.2293
Sharma, K., Vats, T., & Malhotra, H. (2026) · EDPACS · doi:10.1080/07366981.2026.2684470
MEMBANGUN KESADARAN HUKUM MASYARAKAT DALAM MENINGKATKAN KEAMANAN SIBER
Makarim, E. (2026) · Jurnal Rechts Vinding Media Pembinaan Hukum Nasional · doi:10.33331/rechtsvinding.v15i1.2463
Gender Dimensions of Cybersecurity: The Case of Organizations in Albania
Mulita, R., & Sefa, B. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-23297-7_25
Zambrano-Cedeño, G. S., Cuenca-Tapia, J. P., & Paredes, R. O. A. (2026) · MQRInvestigar · doi:10.56048/mqr.2026.e477
Metadata
- Authors
- Cichonski, P., Millar, T., Grance, T., & Scarfone, K.
- Affiliations
- National Institute of Standards and Technology (US)
- United States Department of Homeland Security (US)
- ORCID
- Scarfone, Karen
- Published
- 2012-08
- OpenAlex
- W2617200927
- Cited by
- 485
- References
- 2
- Citations by year
- 2026: 25 · 2025: 37 · 2024: 38 · 2023: 33 · 2022: 43 · 2021: 44 · 2020: 40 · 2019: 26 · 2018: 26 · 2017: 21 · 2016: 20 · 2015: 31 · 2014: 23 · 2013: 11 · 2012: 19
- Type
- report
- Language
- en
- Update notices
- new_version (2025-04-03)
- Open access
- gold
- doi.org
- Licence
- public-domain
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Keywords
- incident response, information security management, FISMA, NIST guidelines, federal information systems, information security standards
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review