Continuity of Operations
What is Continuity of Operations?
A federal government initiative ensuring that agencies are able to continue performance of essential functions during emergencies.
Terms that appear alongside continuity of operations
Each of these is named in at least one of the same controls as continuity of operations. The number is how many controls name both.
- nist 4 shared controls
- security officer 3 shared controls
- disaster recovery 2 shared controls
- information system 2 shared controls
- cisa 2 shared controls
- cybersecurity 2 shared controls
- cyber incident 2 shared controls
- policy 2 shared controls
Frameworks that govern continuity of operations
What the standards actually require on continuity of operations
Requirements naming continuity of operations across 6 standards, quoted from the control text.
Maintain continuity and recover operations after a cyber incident, including for OT-dependent energy functions.
AESCSF-IR-3 · Continuity of operations and recovery →RESPONSE domain. Establish and maintain continuity of operations plans to sustain or restore the function's operations following a cybersecurity incident or disruption.
RESPONSE-3 · Plan for Continuity of Operations →Develop continuity plans for critical functions that include recovery strategies, alternate sites, and workforce continuity.
NFPA1600-10 · Continuity of Operations Plan →Alternate Communications Protocols. Provide the capability to employ [organization-defined] in support of maintaining continuity of operations
NIST800-CP-11 · Alternate Communications Protocols. Provide the capability to employ [organization-defined] in support of maintaining continuity of operations →The FAA Cybersecurity Strategy (updated 2022 + ongoing 2024 update) sets the FAA-wide policy framework for cybersecurity across the aviation system.
FAA-CSA-Governance · FAA Cybersecurity Strategy, Governance and Order 1370.123A →44 USC 3554 - Federal Agency Responsibilities. EACH AGENCY HEAD must: (a) ensure compliance with FISMA + with policies + procedures + standards developed by OMB + CISA + NIST + CNSS;
FISMA-3554-Agency-Responsibilities · Federal Agency Responsibilities (44 USC 3554) - CIO + CISO + Program + Reporting →Questions people ask about continuity of operations
What is Continuity of Operations?
Why is Continuity of Operations important for compliance?
Which compliance frameworks address Continuity of Operations?
Where can I learn more about Continuity of Operations?
See how Continuity of Operations applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.