Operational Continuity
What is Operational Continuity?
The ability to maintain critical business operations during and after disruptive events through preparedness and response planning.
Terms that appear alongside operational continuity
Each of these is named in at least one of the same controls as operational continuity. The number is how many controls name both.
- integrity 2 shared controls
- security operations 2 shared controls
- incident response 2 shared controls
- authentication 2 shared controls
Frameworks that govern operational continuity
What the standards actually require on operational continuity
Requirements naming operational continuity across 6 standards, quoted from the control text.
Weigh the risk of losing control of keying material against the risk to operational continuity if a key cannot be recovered, and set recovery arrangements on that basis.
CCM-CEK-20 · Key Recovery →Plan for continuation of essential mission/business functions with little or no loss of operational continuity; HIGH only.
CP-2(5) · Continue Mission and Business Functions →NSS-17 + NSS-42-G require continuous monitoring + detection + incident response + recovery aligned with CSL. Logging: all CBS log security-relevant events (authentication + authorization + privileged action + configuration change + network connection + system...
IAEA-NSS17-Detect-Monitor-Logging-IR-Recovery-Exercises · IAEA NSS-17 - Detection + Monitoring + Logging + Incident Response + Recovery + Computer Security Exercises →Plan for continuation of essential mission/business functions with little or no loss of operational continuity; HIGH only.
CP-2(5) · Continue Mission and Business Functions →Capture forensic evidence from OT systems in a manner that preserves operational continuity, using non-disruptive techniques and chain-of-custody procedures.
OT-IR-4 · Forensics in OT Environments →Operate logging + monitoring + incident response + DoS resilience per O-RAN WG11 Security Log Management Specifications and incident response specifications.
ORANWG11-7 · Logging, Monitoring, Incident Response, and Denial-of-Service Resilience →Questions people ask about operational continuity
What is Operational Continuity?
Why is Operational Continuity important for compliance?
Which compliance frameworks address Operational Continuity?
Where can I learn more about Operational Continuity?
See how Operational Continuity applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.