NIST CSF 2.0 · derived mapping target
RS.MA-02Incident reports triaged
Triage and validate incoming incident reports so real problems get attention fast and noise does not consume your responders.
Mapping at a glance
RS.MA-02Incident reports triagedNIST CSF 2.0
RS.MA-02 is covered by 12 Sekit CSF controls. +7 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0259IR plan · PolicyRCF-0260IR plan · ProcessRCF-0261IR plan · TechnicalRCF-0265Playbooks · PolicyRCF-0266Playbooks · ProcessRCF-0267Playbooks · TechnicalRCF-0274Tabletop exercises · PolicyRCF-0275Tabletop exercises · ProcessRCF-0276Tabletop exercises · TechnicalRCF-0427IR for ICS · PolicyRCF-0428IR for ICS · ProcessRCF-0429IR for ICS · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Incident response plan
The plan defining how the company acts when a security incident occurs: who does what, who is notified, and within what timeframes.
Incident playbooks, exercises and forensics readiness
The step-by-step guides for the most likely incidents, the tabletop exercises, the post-incident review reports, and how evidence is preserved so an incident can be investigated.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves RS.MA-02?”
Also via MCP, free with account