Communication Plan
What is Communication Plan?
A documented strategy for communicating with internal and external stakeholders during security incidents, including templates and escalation procedures.
Terms that appear alongside communication plan
Each of these is named in at least one of the same controls as communication plan. The number is how many controls name both.
- remediation 2 shared controls
- incident reporting 2 shared controls
- cyber incident 2 shared controls
- ransomware 2 shared controls
- lessons learned 2 shared controls
- incident response 2 shared controls
Frameworks that govern communication plan
What the standards actually require on communication plan
Requirements naming communication plan across 6 standards, quoted from the control text.
Maintain a well-defined communication plan for managing stakeholders and public relations during and after an incident.
ASIC-CR-RR-5 · Stakeholder communication plan →Financial entities shall have crisis communication plans enabling responsible disclosure of major ICT-related incidents or vulnerabilities to clients, counterparts and the public as appropriate, and designate communication policies for internal staff and exter...
DORA-Art.14 · Communication →Establish and maintain an incident response process that addresses roles and responsibilities, compliance requirements, and a communication plan. Review annually, or when significant enterprise changes occur that could impact this Safeguard.
CIS-17.4 · Establish and Maintain an Incident Response Process →Incident response planning including roles, responsibilities, communication plans, and escalation procedures
CAT-D5-1 · Incident planning and strategy →HKMA C-RAF Domain 5 RESPONSE AND RECOVERY + Domain 6 SITUATIONAL AWARENESS. DOMAIN 5 RESPONSE AND RECOVERY (3 sub-areas): (1) INCIDENT RESPONSE PLANNING - documented IR plan + playbooks + runbooks + RACI + escalation criteria + decision trees + communication p...
HKMA-CRAF-Domain5-6-Response-Recovery-SitAwareness · HKMA C-RAF Domain 5 (Response and Recovery) + Domain 6 (Situational Awareness) - Incident Response, Recovery, Threat Landscape, Information Sharing →Plan internal and external communication including incident and stakeholder communication with templates.
ISO22313-7.4 · Guidance on communication →Questions people ask about communication plan
What is Communication Plan?
Why is Communication Plan important for compliance?
Which compliance frameworks address Communication Plan?
Where can I learn more about Communication Plan?
See how Communication Plan applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.