Respond 2.5.4 Mitigation Act to prevent the further spread of a cybersecurity incident and to limit the potential damage. Description Task RS.MI-1 Ensure that cybersecurity incidents can be contained and their further spread blocked. RS.MI-2 Ensure that the impact of cybersecurity incidents can be mitigated. RS.MI-3 Ensure that newly identified vulnerabilities are reduced or documented as accepted risks. Table 39: RS.MI tasks Standard Reference COBIT 5 ISA 62443-3:2013 SR 5.1, SR 5.2, SR 5.4, A.12.2.1, A.16.1.5 ISO 27001:2013 A.12.2.1, A.16.1.5, A.12.6.1 NIST-SP-800-53 Rev. 4 IR-4, CA-7, RA-3, RA-5 BSI B 1.6, B 1.8, M 2.35 Table 40: RS.MI references Minimum ICT standard 2018 33