ComplianceNIST 800-53 enhancement

NIST-SI-2(7) Root Cause Analysis

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SI System and Information Integrity
Control
SI-2(7)

Control statement

a. Conduct root cause analysis to identify underlying causes of issues or failures. b. Develop actions to address the root cause of the issue or failure. c. Implement the actions and monitor the implementation for effectiveness.

Discussion

Root cause analysis includes a wide range of approaches, tools, and techniques to systematically identify the underlying cause of issues or failures to systems and systems components (hardware, software, and firmware). Organizations consider the severity of the incident to determine what root cause analysis method is used and how quickly implementation of the remediation actions. The root cause analysis includes a timeline, missed warning signs, key decisions, gaps, mitigations, and verification of effectiveness. The actions identified to address the source of the issue are implemented and integrated into applicable organizational policy, procedures, and control implementation.

Related

Enhancement of · Compliance (1)

  • NIST-SI-2 Flaw Remediation NIST 800-53 control

Related control · Compliance (29)

  • NIST-AC-1 Policy and Procedures NIST 800-53 control
  • NIST-AT-1 Policy and Procedures NIST 800-53 control
  • NIST-AU-1 Policy and Procedures NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-CA-1 Policy and Procedures NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-CM-1 Policy and Procedures NIST 800-53 control
  • NIST-CP-1 Policy and Procedures NIST 800-53 control
  • NIST-IA-1 Policy and Procedures NIST 800-53 control
  • NIST-IR-1 Policy and Procedures NIST 800-53 control
  • NIST-IR-6 Incident Reporting NIST 800-53 control
  • NIST-IR-8 Incident Response Plan NIST 800-53 control
  • NIST-MA-1 Policy and Procedures NIST 800-53 control
  • NIST-MA-3 Maintenance Tools NIST 800-53 control
  • NIST-MP-1 Policy and Procedures NIST 800-53 control
  • NIST-PE-1 Policy and Procedures NIST 800-53 control
  • NIST-PL-1 Policy and Procedures NIST 800-53 control
  • NIST-PM-1 Information Security Program Plan NIST 800-53 control
  • NIST-PS-1 Policy and Procedures NIST 800-53 control
  • NIST-PT-1 Policy and Procedures NIST 800-53 control
  • NIST-RA-1 Policy and Procedures NIST 800-53 control
  • NIST-RA-5 Vulnerability Monitoring and Scanning NIST 800-53 control
  • NIST-SA-1 Policy and Procedures NIST 800-53 control
  • NIST-SA-11 Developer Testing and Evaluation NIST 800-53 control
  • NIST-SA-15 Development Process, Standards, and Tools NIST 800-53 control
  • NIST-SC-1 Policy and Procedures NIST 800-53 control
  • NIST-SI-1 Policy and Procedures NIST 800-53 control
  • NIST-SR-1 Policy and Procedures NIST 800-53 control
  • NIST-SR-8 Notification Agreements NIST 800-53 control