💼 ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved

Contextual name: 💼 ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved
ID: /frameworks/nist-csf-v2.0/id-im/04
Located in: 💼 Improvement (ID.IM)

Description

Establish contingency plans (e.g., incident response, business continuity, disaster recovery) for responding to and recovering from adverse events that can interfere with operations, expose confidential information, or otherwise endanger the organization's mission and viability
Include contact and communication information, processes for handling common scenarios, and criteria for prioritization, escalation, and elevation in all contingency plans
Create a vulnerability management plan to identify and assess all types of vulnerabilities and to prioritize, test, and implement risk responses
Communicate cybersecurity plans (including updates) to those responsible for carrying them out and to affected parties
Review and update all cybersecurity plans annually or when a need for significant improvements is identified

Section	Sub Sections	Internal Rules	Policies
💼 NIST CSF v1.1 → 💼 PR.IP-9: Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed		3	3
💼 NIST CSF v1.1 → 💼 PR.IP-10: Response and recovery plans are tested		1	1
💼 NIST CSF v1.1 → 💼 RC.IM-1: Recovery plans incorporate lessons learned
💼 NIST CSF v1.1 → 💼 RS.IM-1: Response plans incorporate lessons learned
💼 NIST SP 800-53 Revision 5 → 💼 CP-2 Contingency Plan	8		1
💼 NIST SP 800-53 Revision 5 → 💼 IR-8 Incident Response Plan	1
💼 NIST SP 800-53 Revision 5 → 💼 PL-2 System Security and Privacy Plans	3
💼 NIST SP 800-53 Revision 5 → 💼 SR-2 Supply Chain Risk Management Plan	1

Section	Sub Sections	Internal Rules	Policies	Flags

Policy	Logic Count	Flags
📝 AWS S3 Bucket Versioning is not enabled 🟢	1	🟢 x6
📝 Azure PostgreSQL Flexible Server connection_throttle.enable Parameter is not set to ON 🟢	1	🟢 x6
📝 Azure Storage Blob Containers Soft Delete is not enabled 🟢	1	🟢 x6