Essential Services
What is Essential Services?
Critical business functions and operations that must be maintained during disruptions to ensure organizational survival and stakeholder obligations.
Terms that appear alongside essential services
Each of these is named in at least one of the same controls as essential services. The number is how many controls name both.
- cybersecurity 4 shared controls
- incident reporting 2 shared controls
- gdpr 2 shared controls
- business continuity 2 shared controls
- crisis management 2 shared controls
- data protection 2 shared controls
Frameworks that govern essential services
What the standards actually require on essential services
Requirements naming essential services across 6 standards, quoted from the control text.
Specialization. Employ [organization-defined] on [organization-defined] supporting mission essential services or functions to increase the trustworthiness in those systems or components
NIST800-SA-23 · Specialization. Employ [organization-defined] on [organization-defined] supporting mission essential services or functions to increase the trustworthiness in those systems or components →Commissioner may authorize emergency cybersecurity measures for serious threats to essential services
SCA-S35 · Emergency Measures →High-risk AI. Article 17 designates the categories of high-risk AI systems (e.g. critical infrastructure, education, employment, essential services, justice, biometrics) subject to enhanced governance.
BRAI-A17 · High-risk AI systems →Article 1 establishes the subject matter: NCCS lays down sector-specific rules for cybersecurity aspects of cross-border electricity flows, including rules on common minimum cybersecurity requirements + planning + monitoring + reporting + crisis management.
NCCS-Art.1_2_3 · Subject matter, scope and definitions (NCCS Articles 1-3) →Greece Law 4624/2019 coordination with adjacent Greek + EU statutes. GREEK CONSTITUTION ARTICLE 9A (2001 amendment): right to protection of personal data; constitutional foundation for Greek DP regime + HDPA independence.
GR-DPA-Coordination-Constitution-ePrivacy-NIS2-Whistleblower · Greece Law 4624/2019 Coordination with Greek Constitution Art. 9A, ePrivacy Law 3471/2006, NIS2, Whistleblower Law 4990/2022 →Guidance on fair marketing, product safety, sustainable consumption, consumer data protection, and access to essential services.
ISO-26000-6.7 · Consumer issues →Questions people ask about essential services
What is Essential Services?
Why is Essential Services important for compliance?
Which compliance frameworks address Essential Services?
Where can I learn more about Essential Services?
See how Essential Services applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.