Which two items does NIST say incident tracking should record alongside a summary? Choose two.

Answer: D. Indicators of compromise related to the incident
C. The status and expected time frame for each assigned action

SP 800-61r3 asks that each incident's status be tracked with the useful particulars beside it: a summary, the indicators of compromise tied to it, where each assigned action stands and when it is due, and what comes next.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MA.R3