Skip to content

Cyber Event

What is Cyber Event?

An observable occurrence in cyberspace that may or may not have security implications, requiring analysis to determine significance.

Information Security

Frameworks that govern cyber event

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on cyber event

Requirements naming cyber event across 6 standards, quoted from the control text.

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)2 controls

Document and exercise procedures to operate critical water functions manually during a cyber event.

AWWA-G430-11 · Manual Operations Capability →
Lloyd's of London Cyber Insurance Requirements and Underwriting Standards2 controls

Lloyds Cyber Insurance Requirements - Reinsurance, Capital Protection and Solvency II Alignment. Reinsurance and Capital Protection for Cyber: (a) Cyber-specific retrocession programmes + per-event + aggregate excess of loss + quota share + facultative;

LLOYDS-CI-Reinsurance-Capital-Protection-Solvency-II-ORSA-Coverholder-Delegated-Authority-Cyber-Underwriting · Lloyds Cyber Insurance Reinsurance + Capital + Solvency II + Coverholder →
API 11641 control

Protect interfaces between SCADA and Safety Instrumented Systems to prevent cyber events from impairing safety functions.

API1164-19 · Safety Instrumented Systems Interface →
FAA Cybersecurity Framework for Aviation1 control

The FAA Cybersecurity Strategy (updated 2022 + ongoing 2024 update) sets the FAA-wide policy framework for cybersecurity across the aviation system.

FAA-CSA-Governance · FAA Cybersecurity Strategy, Governance and Order 1370.123A →
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)1 control

NSS-17 + NSS-42-G require ongoing assurance + regulator interface + reporting + continuous improvement. Assurance activities: internal cyber security audit + management review + control effectiveness testing + penetration testing + red team exercises + ISO 270...

IAEA-NSS17-Assurance-Regulator-Inspection-Reporting-Improvement · IAEA NSS-17 - Assurance Activities + Regulator Interface + Inspection + Reporting + Information Sharing + Continuous Improvement →
IEC 62351 - Power Systems Communication Security1 control

Plan and exercise incident response for substation cyber events including forensic data preservation.

IEC62351-IR · Incident Response for Substations →

Questions people ask about cyber event

What is Cyber Event?
An observable occurrence in cyberspace that may or may not have security implications, requiring analysis to determine significance.
Why is Cyber Event important for compliance?
Cyber Event is a key concept in Information Security. Understanding cyber event helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Cyber Event?
Cyber Event appears in the requirement text of AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association), Lloyd's of London Cyber Insurance Requirements and Underwriting Standards, API 1164, FAA Cybersecurity Framework for Aviation, IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1). Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cyber Event?
Explore our compliance framework pages to see how cyber event applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Cyber Event applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.