NIST CSF 2.0 · All Functions · RS Respond

RS.CO — Incident Response Reporting and Communication

Response activities are coordinated with internal and external stakeholders as required by laws, regulations, or policies

RS.CO-02

Internal and external stakeholders are notified of incidents

3 implementation example(s) · 5 mapped NIST 800-53 control(s)

RS.CO-03

Information is shared with designated internal and external stakeholders

6 implementation example(s) · 5 mapped NIST 800-53 control(s)

Source: NIST Cybersecurity Framework 2.0 · CSF 2.0 → 800-53 mappings sourced from NIST Cybersecurity & Privacy Reference Tool (CPRT) · US government work — attribution requested per NIST Open License Terms. Direct CSF→CWE/CVE cross-references will be added in a Phase B LLM-authored mapping pass (not yet rendered).