← CIS Controls v8 in plain English

17.3 IG1

Control 17 / Incident Response Management

Establish and Maintain an Enterprise Process for Reporting Incidents

Think of it likeSetting up a family plan for how to report emergencies, like a fire or break-in.

In plain English

The family establishes a clear process for reporting security incidents within the organization, just as they would create a plan for reporting emergencies at home.

Related CSF subcategories (unofficial mapping)

ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved.RS.CO-02: Internal and external stakeholders are notified of incidents.RS.MA-02: Incident reports are triaged and validated.