Operational Continuity
What is Operational Continuity?
The ability to maintain critical business operations during and after disruptive events through preparedness and response planning.
Terms that appear alongside operational continuity
Each of these is named in at least one of the same controls as operational continuity. The number is how many controls name both.
- integrity 2 shared controls
- security operations 2 shared controls
- incident response 2 shared controls
- authentication 2 shared controls
Frameworks that govern operational continuity
What the standards actually require on operational continuity
Requirements naming operational continuity across 6 standards, quoted from the control text.
Plan for the continuance of [Selection: all; essential] mission and business functions with minimal or no loss of operational continuity and sustains that continuity until full system restoration at primary processing and/or storage sites.
NIST800-CP-2(5) · CP-2(5) Contingency Plan | Continue Mission and Business Functions →Weigh the danger of keying material slipping out of control against the risk to operational continuity if a key cannot be recovered, and set recovery arrangements on that basis. The process includes provisions for legal and regulatory requirements.
CCM-CEK-20 · Key Recovery →Processes, procedures and technical measures are defined, implemented and evaluated to weigh the risk to operational continuity against the risk of exposure of the keying material, and of the data protected by it, if control of that material is lost, taking le...
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::CEK-20 · Key Recovery →Plan for continuation of essential mission/business functions with little or no loss of operational continuity; HIGH only.
CP-2(5) · Continue Mission and Business Functions →NSS-17 + NSS-42-G require continuous monitoring + detection + incident response + recovery aligned with CSL. Logging: all CBS log security-relevant events (authentication + authorization + privileged action + configuration change + network connection + system...
IAEA-NSS17-Detect-Monitor-Logging-IR-Recovery-Exercises · IAEA NSS-17 - Detection + Monitoring + Logging + Incident Response + Recovery + Computer Security Exercises →The organization keeps procedures to manage disruptive incidents that could affect it, its activities, functions, services, supply chain, stakeholders and environment, documenting how it will prevent, protect against, prepare for, mitigate, respond to and reco...
iso-28002-2011::A.5.7.1 · A.5.7.1 General →Questions people ask about operational continuity
What is Operational Continuity?
Why is Operational Continuity important for compliance?
Which compliance frameworks address Operational Continuity?
Where can I learn more about Operational Continuity?
See how Operational Continuity applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.