NIST Special Publication 1800-29, “Data Confidentiality: Detect, Respond to, and Recover from Data Breaches,” provides organizations with practical guidance on managing data confidentiality risks by focusing on the latter three functions of the NIST Cybersecurity Framework: Detect, Respond, and Recover. It addresses the challenges of distinguishing authorized from unauthorized data access and offers strategies to detect ongoing data breaches, respond effectively, and recover from their impacts. The guide emphasizes that while data confidentiality breaches cannot be undone like data integrity issues, organizations can mitigate consequences through technical and policy measures and improve future defenses. It complements NIST SP 1800-28, which focuses on identifying and protecting data before breaches occur, by providing a comprehensive approach using commercially available tools for event detection, log correlation, incident response, and credential management to enhance data breach resilience.
Home / Function (NIST CSF 2.0) / PR - Protect / DS - Data Security