Disruption
What is Disruption?
An event that interrupts normal business operations, potentially causing financial loss, reputational damage, or regulatory consequences.
Terms that appear alongside disruption
Each of these is named in at least one of the same controls as disruption. The number is how many controls name both.
- business continuity 27 shared controls
- resilience 13 shared controls
- cybersecurity 13 shared controls
- risk assessment 11 shared controls
- nist 10 shared controls
- disaster recovery 9 shared controls
- business impact analysis 9 shared controls
- availability 9 shared controls
Frameworks that govern disruption
What the standards actually require on disruption
Requirements naming disruption across 6 standards, quoted from the control text.
Annex B gives guidance on managing disruptions at priority suppliers: the response when a supplier the organization relies on is disrupted, applying the strategies and solutions chosen under 6.2.
iso-ts-22318-2021::B · Annex B Managing priority suppliers' disruptions (informative) →So far as practicable the entity must stop disruptions to critical operations from happening, must be able to adjust its processes and systems to keep operating inside tolerance when one does happen, and must restore normal operations quickly once the disrupti...
apra-cps-230-operational-risk-management::13 · Para 13 Prevent disruption, adapt within tolerance and return to normal promptly →After scenario testing or an actual operational disruption, a firm must carry out a lessons learned exercise to find weaknesses and then make the improvements needed to stay within its impact tolerances.
uk-fcapra-operational-resilience-framework::F-5.8 · Run lessons learned after tests and real disruptions and make the improvements →The organization is to plan how it will keep information security at a suitable level while operations are disrupted. Purpose: protect information and associated assets during disruption.
iso-27002-2022::5.29 · Information security during disruption →Day-to-day operations are managed efficiently and effectively so supports are not disrupted and stay continuous.
australia-ndis-practice-standards-and-quality-indicators::core-16.1 · Continuity of supports: day-to-day operations managed to avoid disruption →The organization is to plan how it will keep information security at a suitable level while operations are disrupted. Purpose (stated in ISO/IEC 27002:2022): protects information and associated assets during disruption.
iso-27001-2022::5.29 · Information security during disruption →Questions people ask about disruption
What is Disruption?
Why is Disruption important for compliance?
Which compliance frameworks address Disruption?
Where can I learn more about Disruption?
See how Disruption applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.