---

id: "DE.AE-04" title: "Adverse Event Analysis" function: "DE" function_name: "Detect" category: "DE.AE" category_name: "Adverse Event Analysis" description: "Incident categories are established and used." controls: - IR-1 - IR-2 - IR-4 - IR-5 - IR-6 - IR-7 - IR-8

---

DE.AE-04: Adverse Event Analysis

Description

Incident categories are established and used.

Category Context

Function: DE — Detect Category: DE.AE — Adverse Event Analysis

Cybersecurity events are analyzed to identify adverse events and incidents.

Mapped SP 800-53 Controls

• IR-1 (Incident Response) — View Control
• IR-2 (Incident Response) — View Control
• IR-4 (Incident Response) — View Control
• IR-5 (Incident Response) — View Control
• IR-6 (Incident Response) — View Control
• IR-7 (Incident Response) — View Control
• IR-8 (Incident Response) — View Control