U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 800-61 Rev. 2

Computer Security Incident Handling Guide

Date Published: August 2012

Supersedes: SP 800-61 Rev. 1 (03/07/2008)

Planning Note (3/20/2023): Send inquiries about this publication to 800-61-comments@nist.gov.


Paul Cichonski (NIST), Thomas Millar (DHS), Tim Grance (NIST), Karen Scarfone (Scarfone Cybersecurity)



computer security incident; incident handling; incident response; threats; vulnerabilities
Control Families

Incident Response; System and Information Integrity


SP 800-61 Rev. 2 (DOI)
Local Download

Supplemental Material:
Press Release (other)

Document History:
08/06/12: SP 800-61 Rev. 2 (Final)