Cybersecurity Database

Guideline / framework / standard

Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile (NIST SP 800-61 Rev. 3)

In force since 3 April 2025Record checked against the official source on 2 November 2026 · Methodology

Official source: https://csrc.nist.gov/pubs/sp/800/61/r3/final

Official sourceDownload PDF (official source)
Official number
NIST SP 800-61 Rev. 3
Date adopted

Summary

It is NIST’s guide to handling cybersecurity incidents, rewritten as a community profile of Cybersecurity Framework 2.0. Instead of the old four-phase cycle, it embeds incident response in the whole of risk management: preparation and governance, detection, analysis, containment, eradication, recovery and lessons learned, linked to the CSF functions and subcategories. It sets out roles and responsibilities, including those of suppliers and third parties, and points to up-to-date operational resources. It is aimed at organisations of all kinds, not only federal agencies.

Information

Jurisdiction
United States
Issuing body
National Institute of Standards and Technology (NIST)
Type
Guideline / framework / standard
Available languages
English
Topics
Notes
Published on 3 April 2025, it supersedes Revision 2 of 2012.

Record details

Original title
Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile (NIST SP 800-61 Rev. 3)
Title in other languages
  • Raccomandazioni per la risposta agli incidenti nella gestione del rischio cyber: profilo di comunità del CSF 2.0 (NIST SP 800-61 Rev. 3)
  • Recommandations pour la réponse aux incidents dans la gestion des risques cyber : profil communautaire du CSF 2.0 (NIST SP 800-61 Rev. 3)
  • Recomendaciones para la respuesta a incidentes en la gestión del riesgo cibernético: perfil comunitario del CSF 2.0 (NIST SP 800-61 Rev. 3)
  • Empfehlungen zur Reaktion auf Vorfälle im Cyberrisikomanagement: Community-Profil des CSF 2.0 (NIST SP 800-61 Rev. 3)
Licence / terms of use
Public domain / official act – US federal government publication, not subject to copyright in the United States.
Collected from
manual entry
Last verified
(verified via web)

How to cite

APA

National Institute of Standards and Technology (NIST). (2025). Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile (NIST SP 800-61 Rev. 3) (NIST SP 800-61 Rev. 3). https://csrc.nist.gov/pubs/sp/800/61/r3/final

Chicago

National Institute of Standards and Technology (NIST). "Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile (NIST SP 800-61 Rev. 3)." 3 April 2025. https://csrc.nist.gov/pubs/sp/800/61/r3/final.

BibTeX

@misc{us_nist_sp_800_61r3_incident_response_2025,
  author       = {{National Institute of Standards and Technology (NIST)}},
  title        = {{Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile (NIST SP 800-61 Rev. 3)}},
  year         = {2025},
  note         = {NIST SP 800-61 Rev. 3},
  url          = {https://csrc.nist.gov/pubs/sp/800/61/r3/final},
  urldate      = {2026-11-02}
}

Metadata and summary: CC BY 4.0 · JSON