thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

CSF Respond Function (RS)

CSF function for taking action regarding a detected cybersecurity incident.

Definition

CSF 2.0 Respond categories are Incident Management (RS.MA), Incident Analysis (RS.AN), Incident Response Reporting and Communication (RS.CO), and Incident Mitigation (RS.MI). It contains the effects of incidents.

Example

Notifying regulators and customers of a breach falls under RS.CO.

Exam tip

Containment and eradication activities are Respond, while restoring assets is Recover.

Related terms