Respond 2.5.3 Analysis Ensure that regular analyses are conducted to permit an effective response to cybersecurity incidents. Description Task RS.AN-1 Ensure that notifications from detection systems are noted and investigated. RS.AN-2 Ensure that the impact of a cybersecurity incident is properly understood. RS.AN-3 Conduct a forensic analysis after any incident that occurs. RS.AN-4 Categorise incidents that occur in accordance with the requirements of the response plan. Table 37: RS.AN tasks Standard Reference COBIT 5 DSS02.07 ISA 62443-3:2013 SR 2.8, SR 2.9, SR 2.10, SR 2.11, SR 2.12, SR 3.9, SR 6.1 ISO 27001:2013 A.12.4.1, A.12.4.3, A.16.1.5, A.16.1.6, A.16.1.7, A.16.1.4 NIST-SP-800-53 Rev. 4 AU-6, CA-7, IR-4, IR-5, PE-6, SI-4, CP-2, IR-4, AU-7, CP-2, IR-5, IR-8 BSI B 5.22, M 2.500, M 2.64, B 1.8 Table 38: RS.AN references Minimum ICT standard 2018 32