The DOI matches its Crossref record, with a small difference in title or year; 2 of the 2 references it cites were found in a registry or an index.
Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology
Open accessAbstract
This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347.NIST is responsible for developing information security standards and guidelines, including minimum requirements for Federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate Federal officials exercising policy authority over such systems.This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130, Section 8b(3), Securing Agency Information Systems, as analyzed in Circular A-130, Appendix IV: Analysis of Key Sections.Supplemental information is provided in Circular A-130, Appendix III, Security of Federal Automated Information Resources.Nothing in this publication should be taken to contradict the standards and guidelines made mandatory and binding on Federal agencies by the Secretary of Commerce under statutory authority.Nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, Director of the OMB, or any other Federal official.This publication may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright in the United States.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“When these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Cichonski et al., 2012
In the citing paper
“The standards serve as frameworks to develop secure networks and can be used as guides and best practice definitions [84].”
From Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure. (2023) · cites this paper as [84]
Citations
Cites
Guide to test, training, and exercise programs for IT plans and capabilities
Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006) · doi:10.6028/nist.sp.800-84 · Cited by 41
Self-citationRecommended security controls for federal information systems and organizations
Ross, R., Katzke, S. W., Johnson, L. A., Swanson, M., Stoneburner, G., & Rogers, G. (2007) · doi:10.6028/nist.sp.800-53r2 · Cited by 8
Cited by
Sorted by citations
Items 501–534 of 534
A Chaos Theory Perspective on Expert Decision-Making in Cyber Incident Response
Policarpio, V. M., Krantz, M., & Thakur, K. (2026) · Computer and Information Science · doi:10.5539/cis.v19n2p94
Toward Structured Memory Forensics: A MITRE ATT&CK-Aligned Workflow For Malware Investigation
Rodríguez, R. J. (2026) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-032-22542-9_18
Too Small to Stand Alone: Capability Constraints and Cooperative Digital Sovereignty in APT Defense
Hagen, R. A. (2026) · Springer proceedings in complexity · doi:10.1007/978-3-032-21524-6_37
Mbuko, I. C., Ijiga, O. M., & Bamigwojo, O. V. (2025) · International Journal of Scientific Research in Computer Science Engineering and Information Technology · doi:10.32628/cseit26123383
Yonga, J. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.7252719
Iyabo, A. M., & Nwulu, N. (2026) · CRC Press eBooks · doi:10.1201/9781003633839
Krušniauskas, S., & Šatkauskas, N. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35586-7_20
Graph Analysis of Incident Response Process Activities and Communications
Galadima, H. S., Doherty, C., & Brennan, R. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35579-9_22
Moromenacho, E. G. P. (2026) · Journal of Intelligent Decision Making and Information Science · doi:10.59543/jidmis.v3.2138
Junus, M. S., Miharja, M. N. D., & Arya, H. (2026) · Jurnal Sosial Teknologi · doi:10.59188/jurnalsostech.v6i8.32966
Zhang, J., Liu, H., Ren, L., Zhao, Y., & Song, Z. (2026) · ICST Transactions on Scalable Information Systems · doi:10.4108/eetsis.13946
サイバーセキュリティにおける日本国家の役割 -経済、防衛、社会政治の構成要素における平和主義的な政策枠組みの安全保障化-
Nurcan, E. S., & ヌルジャン, エ. セ. (2026) · Institutional Repositories DataBase (IRDB)
Ethical Hacking and Network Security Essentials
Panday, S., Kumar, A., & Singh, J. (2026) · doi:10.70593/978-81-69589-86-4
Wang, Y., Liu, H., Liu, Z., Zhao, H., & Wei, F. (2026) · ICST Transactions on Scalable Information Systems · doi:10.4108/eetsis.13943
AI-Assisted Risk and Incident Analysis: Advances and Future Opportunities
Unamma, U. M.-L. (2026) · WORLD JOURNAL OF INNOVATION AND MODERN TECHNOLOGY · doi:10.56201/wjimt.v9.no8.2025.pg99.142
Synthetic Impersonation in the Power Sector
Jędrasiak, K., & Gawliczek, P. (2026) · Journal of Scientific Papers Social development & Security · doi:10.33445/sds.2026.16.4.11
Nguyen, Y. V. T., Binh, L. T., Anh, P. T., Trung, N. H., & Mai, H. D. (2026) · Lecture notes in computer science · doi:10.1007/978-981-92-5699-0_30
Benhizia, A., Laraba, A., Kandi, M. A., & Laborde, R. (2026) · Annals of Computer Science and Information Systems · doi:10.15439/2026f5303
Position Papers of the 21st Conference on Computer Science and Intelligence Systems
(2026) · Annals of Computer Science and Information Systems · doi:10.15439/978-83-977088-3-9
CADscanner: Automating Malware Analysis for Compiled AutoCAD Scripts in Engineering Environments
Yin, L., Sun, C., Liang, C., Wang, C., Zhi, S., Zheng, T., Liu, Z., Liu, X., & Zhou, Q. (2026) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1145/3832783.3834495
Rahman, M. H., & Rahman, M. H. (2026) · doi:10.63125/8m7wek47
Shertzer, Y., & Nitzan, A. (2026) · Management Research Review · doi:10.1108/mrr-03-2026-0267
Widaningsih, & Yudiardi, D. (2026) · Novatio Journal of Management Technology and Innovation · doi:10.61978/novatio.v4i1.1989
(2026) · International Journal of Progressive Research in Engineering Management and Science · doi:10.58257/ijprems55014
Zenia, M. M. (2024) · American Journal of Scholarly Research and Innovation · doi:10.63125/an0pcq39 · Cited by 2
A RiskBased Cybersecurity Assessment Framework for Educational Institutions
Vaidya, K. (2026) · International Journal of Versatile Research and Analysis · doi:10.56975/ijvra.v4i10.711726
Shelupanov, A. A., & Podborskaya, I. G. (2026) · Bezopasnost informacionnyh tehnology · doi:10.26583/bit.2026.5.03
Gupit, D. O., & Matias, J. B. (2026) · International Artificial Intelligence and Data Processing Symposium (IDAP) · doi:10.1109/idap71869.2026.11728022
Mishra, R., & Chaudhary, N. (2026) · Journal of Computers Mechanical and Management · doi:10.57159/jcmm.5.5.261067
Simonsen, J. V. (2005) · NORA - Norwegian Open Research Archives
Metadata
- Authors
- Cichonski, P., Millar, T., Grance, T., & Scarfone, K.
- Affiliations
- National Institute of Standards and Technology (US)
- United States Department of Homeland Security (US)
- ORCID
- Scarfone, Karen
- Published
- 2012-08
- OpenAlex
- W2617200927
- Cited by
- 485
- References
- 2
- Citations by year
- 2026: 25 · 2025: 37 · 2024: 38 · 2023: 33 · 2022: 43 · 2021: 44 · 2020: 40 · 2019: 26 · 2018: 26 · 2017: 21 · 2016: 20 · 2015: 31 · 2014: 23 · 2013: 11 · 2012: 19
- Type
- report
- Language
- en
- Update notices
- new_version (2025-04-03)
- Open access
- gold
- doi.org
- Licence
- public-domain
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Keywords
- incident response, information security management, FISMA, NIST guidelines, federal information systems, information security standards
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review