What problem does it solve? Systems engineers and security practitioners need NIST SP 800-61 Rev. 3 incident response guidance mid-task but cannot recall the CSF 2.0-aligned life cycle, Community Profile priorities, or role and policy requirements from memory. ## Core Features & Use Cases - Chapter-level reference notes: Six chapters covering the CSF-based IR life cycle, roles and policies, the Table 2 preparation profile, the Table 3 Detect/Respond/Recover profile, and coordination and continuous improvement. - Topic and chapter lookup: Query by topic (e.g., incident declaration, playbooks, lessons learned) or by chapter ch01 through ch06, with a topic index mapping questions to chapters. - Supporting aids: A glossary of IR and CSF terms, twelve implementation patterns with trade-offs, and a cheatsheet of decision rules and common failure smells. - Use Case: When migrating from SP 800-61r2 to a CSF 2.0-aligned IR program, ask for the Table 1 phase mapping and Community Profile priorities to plan the transition. ## Quick Start Ask the agent to explain the NIST SP 800-61r3 incident response life cycle and how it maps to CSF 2.0 Functions.
