NIST - Lessons Learned

This playbook assists in processing an incident after it occurs and facilitates the lessons learned stage, as described in the ‘Handling an Incident’ section of NIST - Computer Security Incident Handling Guide. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

This playbook does not use any commands.

Playbook Inputs


NameDescriptionDefault ValueRequired
DataCollectionUse a data collection task to answer lessons learned questions based on NIST. Specify 'True' to automatically send the communication task, and 'False' to prevent it.TrueOptional
EmailEmail address to which to send the questions.Optional

Playbook Outputs


PathDescriptionType
NIST - Lessons Learned.Answers.0Answer to communication task.shortText
NIST - Lessons Learned.Answers.1Answer to communication task.shortText
NIST - Lessons Learned.Answers.2Answer to communication task.shortText
NIST - Lessons Learned.Answers.3Answer to communication task.shortText
NIST - Lessons Learned.Answers.4Answer to communication task.shortText
NIST - Lessons Learned.Answers.5Answer to communication task.shortText
NIST - Lessons Learned.Answers.6Answer to communication task.shortText
NIST - Lessons Learned.Answers.7Answer to communication task.shortText
NIST - Lessons Learned.Answers.8Answer to communication task.shortText
NIST - Lessons Learned.Answers.nameProvided username or email addressunknown

Playbook Image


NIST_Lessons_Learned