http://y7egb5vi45k74makeixpfb7jnimfxm3gf233lb3ke2ldonozjk55nvad.onion/incidence_response_checklist.html
Provide a step-by-step review of the entire incident and answer the Who, What, Where, Why, and How questions. 10g. Provide CISA with post-incident update with seven (7) days of resolution or as directed by CISA in the Federal Incident Notification Guidelines. 10h. Work with CISA to provide required artifacts, close the ticket, and/or take additional response action.