[NIST project page](https://csrc.nist.gov/pubs/sp/800/61/r3/ipd)


[NIST CSF 2.0 incident life cycle.png]

The Govern, Identify, and Protect activities are now outside the primary incident response life cycle, which consists of Detect, Respond, and Recover.

NIST encourages people to utilize online resources, including the selected examples listed for [Preparation Resources](https://csrc.nist.gov/projects/incident-response/preparation-resources) and [Life Cycle Resources](https://csrc.nist.gov/projects/incident-response/life-cycle-resources), in conjunction with [SP 800-61 Revision 3](https://csrc.nist.gov/pubs/sp/800/61/r3/ipd) and [NIST CSF 2.0](https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-csf-20/final), to access additional information on implementing the recommendations and considerations in the publication.