Pelaporan
Laporkan insiden kepada pemangku kepentingan dan otoritas.
Pelaporan didefinisikan oleh hasil NIST CSF 2.0 RS.CO-02 (Internal and external stakeholders are notified of incidents). Crosswalk Dipetakan melalui crosswalk yang dipublikasikan dalam ISO 27001, PCI DSS, CMMC, 800-53, HIPAA dan NIS2. Editorial Dipetakan secara editorial dalam CIS v8.1, SOC 2, GDPR, Essential Eight, DORA dan CPS 234. Tidak ada pemetaan dalam data kami Tidak ada pemetaan dalam data kami untuk Cyber Essentials.
| Kerangka kerja | Persyaratan | Judul | Tautan | Sumber / alasan |
|---|---|---|---|---|
| NIST CSF 2.0 | RS.CO-02 | Internal and external stakeholders are notified of incidents | Definisi topik | RS.CO-02 |
| ISO 27001 | A.5.5A.6.8 | Contact with authorities; Information security event reporting | Crosswalk | A.5.5: via NIST 800-53 map: IR-6 A.6.8: via NIST 800-53 map: IR-6 |
| CIS v8.1 | CIS 17.3 | Establish and Maintain an Enterprise Process for Reporting Incidents | Editorial | CIS 17.3: Enterprise process for reporting incidents; not in CIS's own crosswalk to CSF 2.0, which covers 49 of 153 safeguards. |
| SOC 2 | CC2.3 | Communication with external parties | Editorial | CC2.3: AICPA's TSC mappings are not openly licensed; ControlMapping editorial mapping (criterion summaries are ours, not AICPA text). |
| PCI DSS | 12.10.1 | Incident response plan ready to activate | Crosswalk | 12.10.1: via RS.CO-02 |
| CMMC | IR.L2-3.6.2 | Incident Reporting | Crosswalk | IR.L2-3.6.2: via 800-171r3 03.06.02 ↔ RS.CO-02 → IR-6; 800-171r2 Appendix D → IR-6 |
| 800-53 | IR-6 | Incident Reporting | Crosswalk | IR-6: via RS.CO-02 |
| HIPAA | §164.308(a)(6)(ii) | Response and Reporting | Crosswalk | §164.308(a)(6)(ii): via NIST HIPAA map: IR-6 |
| GDPR | Art.33(1)Art.34(1) | Notification of a personal data breach to the supervisory authority; Communication of a personal data breach to the data subject | Editorial | No official crosswalk exists for GDPR; ControlMapping editorial mapping. |
| NIS2 | 3.3 | Event reporting | Crosswalk | 3.3: via RS.CO-02; ENISA ISO map: A.6.8 |
| Essential Eight | ISM-0123ISM-0140 | Cyber security incidents are reported to the chief information security officer, or one…; Cyber security incidents are reported to ASD as soon as possible after they occur or… | Editorial | ASD assigns these ISM controls to the Essential Eight; ASD publishes no crosswalk to NIST or ISO, so linking them to topics is ControlMapping editorial. |
| DORA | Art.19(1)Art.19(4)Art.19(3)Art.18(1) | Reporting of major ICT-related incidents and voluntary notification of significant cyber threats; Reporting of major ICT-related incidents and voluntary notification of significant cyber threats; Reporting of major ICT-related incidents and voluntary notification of significant cyber threats… | Editorial | Art.19(1): Report major ICT-related incidents to the competent authority. Art.19(4): An initial notification, intermediate reports and a final report. Art.19(3): Inform clients without undue delay when a major incident affects their financial interests. Art.18(1): The classification criteria decide which incidents are major and therefore reportable. |
| CPS 234 | Para 35Para 36 | Notify APRA of material incidents within 72 hours; Notify APRA of material control weaknesses within 10 business days | Editorial | Para 35: Notify APRA within 72 hours of becoming aware of a material information security incident. Para 36: Notify APRA within 10 business days of a material control weakness that can't be remediated in time. |
| Cyber Essentials | — | Tidak ada persyaratan | Tidak ada pemetaan dalam data kami | Tidak ada persyaratan Cyber Essentials yang dipetakan ke topik ini dalam data kami. |
Definisi topik Hasil CSF 2.0 yang mendefinisikan topik ini · Crosswalk setidaknya satu pilihan didukung crosswalk yang dipublikasikan · Editorial Penilaian ControlMapping, beserta alasannya · belum dipetakan, hanya berbagi hasil CSF untuk topik ini · Tidak ada pemetaan dalam data kami belum ada yang dipetakan dalam data kami; sering kali pekerjaan baru, tetapi periksa catatan cakupannya. Metodologi.
ID dan judul persyaratan ditampilkan sebagaimana diterbitkan masing-masing framework, dalam bahasa Inggris.
Pemetaan salah atau belum ada? Laporkan
Tentang Pelaporan
Pelaporan insiden memastikan bahwa peristiwa keamanan siber didokumentasikan dan dikomunikasikan kepada pemangku kepentingan internal yang relevan, badan regulator, dan lembaga penegak hukum sebagaimana dipersyaratkan oleh peraturan perundang-undangan yang berlaku dan kewajiban kontrak. Laporan sebaiknya mencakup linimasa insiden, sistem dan data yang terdampak, tindakan penahanan yang telah dilakukan, analisis akar penyebab, serta langkah remediasi. Organisasi harus senantiasa memahami seluruh persyaratan pelaporan yang berlaku, termasuk peraturan khusus sektor seperti aturan notifikasi pelanggaran HIPAA, persyaratan pelaporan CISA untuk infrastruktur kritis, serta komitmen SLA kontraktual kepada pelanggan dan mitra.