Critical System
What is Critical System?
An information system whose failure or compromise would have severe consequences for the organization's operations or mission.
Terms that appear alongside critical system
Each of these is named in at least one of the same controls as critical system. The number is how many controls name both.
- lessons learned 4 shared controls
- disruption 3 shared controls
- recovery point objective 3 shared controls
- recovery time objective 3 shared controls
- incident response 3 shared controls
- remediation 2 shared controls
- incident reporting 2 shared controls
- ransomware 2 shared controls
Frameworks that govern critical system
What the standards actually require on critical system
Requirements naming critical system across 6 standards, quoted from the control text.
For critical information systems the bank prioritises a minimal RTO approved by its ITSC and a near-zero RPO.
rbi-cybersecurity-framework-for-banks::171 · Para 171: minimal ITSC-approved RTO and near zero RPO for critical systems →The institution identifies the key business and support functions whose failure would create material operational or reputational risk, significant financial loss or harm to Hong Kong's financial stability, the critical services or systems under each with thei...
hkma-cyber-resilience-assessment-framework-c-raf::ICAST.3 · iCAST scoping: key functions, critical systems and test goals →A responsible entity for an enhanced-class asset must establish and maintain a process or system in its CIRMP to identify and maintain an inventory of critical systems and how they connect to other critical systems and computers, to recover and restore critica...
critical-infrastructure-risk-management-program-cirmp-rules-2023::8C · s 8C Lateral movement hazards: inventory of critical systems, recovery and continued availability, and network segregation with a three-month independence standard →The FI must put in place a framework and process to identify its critical systems. The FAQs add that the framework and the list of critical systems should be documented and kept for supervisory request (not filed with MAS), and that every FI must have the fram...
monetary-authority-of-singapore-technology-risk-management-guidelines::TRMN.4 · Notice on TRM paragraph 4: framework to identify critical systems →Set policies on software and hardware supply chain security for the systems and assets identified as critical.
imo-maritime-cybersecurity-guidelines-msc-fal-1-circ-3-rev-4::3.5.3.8 · 3.5.3.8 Supply chain security policy for critical systems →Recovery plan for critical systems. Control from NIST SP 1800-32 framework, domain: NIST SP 1800-32: Incident Response & Recovery.
NIST1800-32-17 · Recovery plan for critical systems →Questions people ask about critical system
What is Critical System?
Why is Critical System important for compliance?
Which compliance frameworks address Critical System?
Where can I learn more about Critical System?
See how Critical System applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.