Skip to main content

💼 A.17.1.2 Implementing information security continuity

Description

The organization shall establish, document, implement and maintain processes, procedures and controls to ensure the required level of continuity for information security during an adverse situation.

Similar

  • Internal
    • ID: dec-c-bd56d528

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v1.1 → 💼 ID.BE-4: Dependencies and critical functions for delivery of critical services are established3
💼 NIST CSF v1.1 → 💼 ID.BE-5: Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress/attack, during recovery, normal operations)33
💼 NIST CSF v1.1 → 💼 PR.IP-4: Backups of information are conducted, maintained, and tested47
💼 NIST CSF v1.1 → 💼 PR.IP-9: Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed33
💼 NIST CSF v1.1 → 💼 PR.PT-5: Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations33

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags

Policies (3)

PolicyLogic CountFlags
📝 AWS S3 Bucket Versioning is not enabled 🟢1🟢 x6
📝 Azure PostgreSQL Flexible Server connection_throttle.enable Parameter is not set to ON 🟢1🟢 x6
📝 Azure Storage Blob Containers Soft Delete is not enabled 🟢1🟢 x6

Internal Rules

RulePoliciesFlags
✉️ dec-x-2a9e52551
✉️ dec-x-850beea81
✉️ dec-x-a8281d051