Requirement
The cybersecurity requirements for business continuity management must be implemented.
Control Implementation Guidelines
- Implement cybersecurity requirements within business continuity management that have been identified, documented, and approved in the policy
- Develop an action plan to implement all cybersecurity requirements to ensure BCM in the organization
- Include cybersecurity requirements for BCM in the organization's BCM procedures to ensure compliance with cybersecurity requirements for all internal and external stakeholders
Expected Deliverables
- Documents that confirm the implementation of cybersecurity requirements related to BCM as documented in the policy
- An action plan to implement cybersecurity requirements for BCM in the organization
- Evidence showing the implementation of BCM controls at the organization, including but not limited to:
- Documented and approved business continuity plans for the organization
- Approved plans to respond to cybersecurity incidents that may affect the business continuity of the organization
- Reports on the implementation of disaster recovery plans tests at the organization
