← NIST CSF 2.0 in plain English

RS.AN-07

Respond / Incident Analysis

Incident data and metadata are collected, and their integrity and provenance are preserved.

Think of it likeDocumenting the damage after a storm to report to insurance.

In plain English

The family collects and keeps accurate records of what happened during an incident, like taking photos of storm damage for insurance.

Related CIS safeguards (unofficial mapping)