Requirement
Cybersecurity requirements for business continuity management must be defined, documented and approved.
Control Implementation Guidelines
- Include and document cybersecurity requirements within the organization's business continuity management, including but not limited to:
- Ensure the continuity of cybersecurity-related systems and procedures
- Develop cybersecurity incident response plans that may affect the business continuity of the organization
- Develop Disaster Recovery Plan
- Cybersecurity requirements within business continuity management must be supported by the Executive Management. This must be done through the approval of the organization head or his/her deputy
Relevant Cybersecurity Tools
- Cybersecurity Business Continuity Policy Template
Expected Deliverables
- Cybersecurity policy that covers the requirements of business continuity management (e.g., electronic copy or official hard copy)
- Formal approval by the head of the organization or his/her deputy on such document (e.g., via the organization's official e-mail, paper or electronic signature)
