According to NIST what option(s) should be contained in issue tracking system?
A. The current status of the incident
B. A summary of the incident
C. Indicators related to the incident
D. Other incidents related to this incident
E. Actions taken by all incident handlers on this incident
F. Chain of custody, if applicable
G. Impact assessments related to the incident
H. Contact information for other involved parties (e.g., system owners, system administrators)
I. A list of evidence gathered during the incident investigation
J. Comments from incident handlers
K. Next steps to be taken (e.g., rebuild the host, upgrade an application).
The current status of the incident (new, in progress, forwarded for investigation, resolved, etc.)
A summary of the incident
Indicators related to the incident
Other incidents related to this incident
Actions taken by all incident handlers on this incident
Chain of custody, if applicable
Impact assessments related to the incident
Contact information for other involved parties (e.g., system owners, system administrators)
A list of evidence gathered during the incident investigation
Comments from incident handlers
Next steps to be taken (e.g., rebuild the host, upgrade an application).
All of the above
Pulled word per word from NIST SP 800-61 r2 book
wrong, it should contain all of them
NIST.SP.800-61r2 page 31