NIST CSF 2.0 · derived mapping target
DE.AE-04Impact and scope understood
Work out the likely impact and scope of an adverse event so you can size your response to how serious it actually is.
Mapping at a glance
DE.AE-04Impact and scope understoodNIST CSF 2.0
DE.AE-04 is covered by 3 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0202Alerting & triage · PolicyRCF-0203Alerting & triage · ProcessRCF-0204Alerting & triage · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Incident playbooks, exercises and forensics readiness
The step-by-step guides for the most likely incidents, the tabletop exercises, the post-incident review reports, and how evidence is preserved so an incident can be investigated.
Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves DE.AE-04?”
Also via MCP, free with account