---

id: "RS.AN-03" title: "Analysis" function: "RS" function_name: "Respond" category: "RS.AN" category_name: "Analysis" description: "Forensic analysis is conducted." controls: - IR-1 - IR-2 - IR-4 - IR-5 - IR-8

---

RS.AN-03: Analysis

Description

Forensic analysis is conducted.

Category Context

Function: RS — Respond Category: RS.AN — Analysis

Incidents are analyzed to determine impact and appropriate response.

Mapped SP 800-53 Controls

• IR-1 (Incident Response) — View Control
• IR-2 (Incident Response) — View Control
• IR-4 (Incident Response) — View Control
• IR-5 (Incident Response) — View Control
• IR-8 (Incident Response) — View Control