Continuity of Operations
What is Continuity of Operations?
A federal government initiative ensuring that agencies are able to continue performance of essential functions during emergencies.
Terms that appear alongside continuity of operations
Each of these is named in at least one of the same controls as continuity of operations. The number is how many controls name both.
- nist 4 shared controls
- security officer 3 shared controls
- disaster recovery 2 shared controls
- information system 2 shared controls
- cisa 2 shared controls
- cybersecurity 2 shared controls
- cyber incident 2 shared controls
- policy 2 shared controls
Frameworks that govern continuity of operations
What the standards actually require on continuity of operations
Requirements naming continuity of operations across 6 standards, quoted from the control text.
Identify [Assignment: organization-defined classes of incidents] and take the following actions in response to those incidents to ensure continuation of organizational mission and business functions: [Assignment: organization-defined actions to take in respons...
NIST800-IR-4(3) · IR-4(3) Incident Handling | Continuity of Operations →RESPONSE domain. Establish and maintain continuity of operations plans to sustain or restore the function's operations following a cybersecurity incident or disruption.
RESPONSE-3 · Plan for Continuity of Operations →The program includes plans and procedures to ensure continuity of operations for the information systems that support the agency's operations and assets.
fisma::3554(b)(8) · 3554(b)(8) Continuity of operations plans →The system can use defined alternative communications protocols to maintain continuity of operations. No enhancements.
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::CP-11 · CP-11 Alternate communications protocols →Development, acquisition and maintenance are integral to operations, and weaknesses in them lead to failures of confidentiality, integrity, availability and resilience;
ffiec-it-examination-handbook::DAM-I · I OVERVIEW OF DEVELOPMENT, ACQUISITION, AND (Development, Acquisition, and Maintenance) →The organization should establish cooperation agreements with other organizations by establishing a dedicated function to ensure coordination and dedicating resources including liaison people (ISO 22397 on partnering arrangements), as part of preparedness wher...
iso-22320-2018::6.3.2 · 6.3.2 Agreements →Questions people ask about continuity of operations
What is Continuity of Operations?
Why is Continuity of Operations important for compliance?
Which compliance frameworks address Continuity of Operations?
Where can I learn more about Continuity of Operations?
See how Continuity of Operations applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.