NIST SP 800-61
E532554
NIST SP 800-61 is a National Institute of Standards and Technology guideline that provides best practices and a framework for computer security incident handling and response.
All labels observed (2)
| Label | Occurrences |
|---|---|
| NIST SP 800-61 canonical | 2 |
| Computer Security Incident Handling Guide | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T5562063 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: NIST SP 800-61 Context triple: [Special Publications, hasPart, NIST SP 800-61]
-
A.
NIST SP 800-67
NIST SP 800-67 is a NIST Special Publication that provides technical guidance and recommendations for the use and implementation of the Triple Data Encryption Algorithm (TDEA/3DES) in federal information systems.
-
B.
NIST SP 800 series
The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
-
C.
NIST Cybersecurity Framework
The NIST Cybersecurity Framework is a widely adopted set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risk through a structured, risk-based approach.
-
D.
ISO/IEC 27005
ISO/IEC 27005 is an international standard that provides guidelines for information security risk management within an organization’s overall information security management system.
-
E.
ISO/IEC 27035
ISO/IEC 27035 is an international standard that provides guidelines and best practices for managing and responding to information security incidents within organizations.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: NIST SP 800-61 Target entity description: NIST SP 800-61 is a National Institute of Standards and Technology guideline that provides best practices and a framework for computer security incident handling and response.
-
A.
NIST SP 800-67
NIST SP 800-67 is a NIST Special Publication that provides technical guidance and recommendations for the use and implementation of the Triple Data Encryption Algorithm (TDEA/3DES) in federal information systems.
-
B.
NIST SP 800 series
The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
-
C.
NIST Cybersecurity Framework
The NIST Cybersecurity Framework is a widely adopted set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risk through a structured, risk-based approach.
-
D.
ISO/IEC 27005
ISO/IEC 27005 is an international standard that provides guidelines for information security risk management within an organization’s overall information security management system.
-
E.
ISO/IEC 27035
ISO/IEC 27035 is an international standard that provides guidelines and best practices for managing and responding to information security incidents within organizations.
- F. None of above. chosen
Statements (46)
| Predicate | Object |
|---|---|
| instanceOf |
NIST Special Publication
ⓘ
computer security guideline ⓘ incident response framework ⓘ |
| addresses |
communication during incidents
ⓘ
evidence collection and handling ⓘ legal considerations for incident response ⓘ management aspects of incident response ⓘ technical incident handling ⓘ use of automated tools in incident response ⓘ |
| appliesTo |
federal information systems
ⓘ
government agencies ⓘ private sector organizations ⓘ |
| countryOfOrigin |
United States
ⓘ
linked to:
United States of America
|
| defines |
incident handling process
ⓘ
incident response life cycle ⓘ |
| field |
computer security
ⓘ
incident response ⓘ information security ⓘ |
| focusesOn |
containment eradication and recovery
ⓘ
detection and analysis of incidents ⓘ post-incident activity ⓘ preparation for incidents ⓘ |
| language | English ⓘ |
| objective |
improve organizational incident response capability
ⓘ
reduce impact of security incidents ⓘ standardize incident handling practices ⓘ |
| provides |
best practices for incident response
ⓘ
framework for incident response processes ⓘ guidance on computer security incident handling ⓘ |
| publisher | National Institute of Standards and Technology ⓘ |
| recommends |
coordination with external organizations
ⓘ
defining incident response team structure ⓘ developing incident response plans ⓘ developing incident response policies ⓘ establishing an incident response capability ⓘ incident documentation ⓘ incident metrics and measurement ⓘ incident reporting procedures ⓘ incident response exercises ⓘ training for incident response personnel ⓘ |
| relatedTo |
NIST Risk Management Framework
ⓘ
NIST SP 800-53 ⓘ |
| title |
Computer Security Incident Handling Guide
ⓘ
linked to:
NIST SP 800-61
|
| usedBy |
incident response teams
ⓘ
information security managers ⓘ security operations centers ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: NIST SP 800-61 Description of subject: NIST SP 800-61 is a National Institute of Standards and Technology guideline that provides best practices and a framework for computer security incident handling and response.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: NIST SP 800-61