← NIST CSF 2.0 in plain English

RS.AN-07

Respond / Incident Analysis

Incident data and metadata are collected, and their integrity and provenance are preserved.

Think of it likeDocumenting the damage after a storm to report to insurance.

In plain English

The family collects and keeps accurate records of what happened during an incident, like taking photos of storm damage for insurance.