Crisis Management Plan
What is Crisis Management Plan?
A documented guide for responding to major disruptions, defining leadership roles, communication protocols, and decision-making processes during a crisis.
Terms that appear alongside crisis management plan
Each of these is named in at least one of the same controls as crisis management plan. The number is how many controls name both.
- crisis management 4 shared controls
- ciso 2 shared controls
- governance 2 shared controls
- cybersecurity 2 shared controls
- resilience 2 shared controls
- crisis communication 2 shared controls
- compliance 2 shared controls
- audit 2 shared controls
Frameworks that govern crisis management plan
What the standards actually require on crisis management plan
Requirements naming crisis management plan across 6 standards, quoted from the control text.
The bank documents a Cyber Crisis Management Plan forming part of the Board-approved cybersecurity framework.
rbi-cybersecurity-framework-for-banks::192 · Para 192: documented Cyber Crisis Management Plan within the Board framework →The corporate disaster recovery, business continuity and crisis management plans take cyber incidents into account as an integrated matter.
ffiec-cybersecurity-assessment-tool-cat::D5.IR.Pl.E.2 · D5.IR.Pl.E.2 Planning (Evolving 2) →Advanced control principles for governance and preparation of incident response and recovery (required, with baseline and intermediate, of an AI whose inherent risk is high).
hkma-cyber-resilience-assessment-framework-c-raf::5.1.A · 5.1 Governance and preparation of incident response and recovery: advanced level →Preparedness. The organization should make its crisis team structure resilient by naming a primary and an alternate for each function, and make sure every member is trained, competent and resourced;
iso-22361-2022::5.3.4 · Preparedness →The exercise types the standard describes are: the alert exercise (testing the alerting mechanism and participants' response); the start-up exercise (testing and developing the ability to activate an appropriate response, following an alert exercise);
iso-22398-2013::5.2.12 · Exercise types →Key activities: the response team reviews whether the incident is under control; if so it instigates the required response, immediate (activating recovery procedures, communicating to involved personnel) or later (facilitating full recovery), keeping all infor...
iso-iec-27035-1-2023::5.5 · Respond →Questions people ask about crisis management plan
What is Crisis Management Plan?
Why is Crisis Management Plan important for compliance?
Which compliance frameworks address Crisis Management Plan?
Where can I learn more about Crisis Management Plan?
See how Crisis Management Plan applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.