|
Work item:
|
X.1216 (ex X.gcpie)
|
|
Subject/title:
|
Requirements for collection and preservation of cybersecurity incident evidence
|
|
Status:
|
Approved on 2020-09-03
|
|
Approval process:
|
TAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
-
|
|
Liaison:
|
-
|
|
Supporting members:
|
-
|
|
Summary:
|
Recommendation ITU-T X.1216 describes a general procedure for cybersecurity incident response and investigation, analyses sources of cybersecurity incident evidence and specifies capability requirements for tools used for collection and preservation of such evidence an investigative process. This Recommendation also specifies reliability assurance requirements for these tools as guidelines to developers who design tools for such purpose.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2018-04-06 13:27:58
|
|
Last update:
2020-10-20 11:15:00
|
