Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Provide role-based security training to organizational personnel: Before authorizing access to the system or CUI, before performing assigned duties, a
Notifications from detection systems are investigated
The impact of the incident is understood
Analysis is performed to establish what has taken place during an incident and the root cause of the incident
Incidents are categorized consistent with response plans
Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g.
Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved
Incident data and metadata are collected, and their integrity and provenance are preserved
An incident's magnitude is estimated and validated
Personnel know their roles and order of operations when a response is needed