Workaround
What is Workaround?
A temporary alternative process or procedure used to maintain operations when normal systems or processes are unavailable.
Frameworks that govern workaround
What the standards actually require on workaround
Requirements naming workaround across 6 standards, quoted from the control text.
Continuity plans are required to identify and record: which stakeholders are to be notified; which processes have to keep running; who carries out the continuity strategies and what each is responsible for;
nfpa-1600-standard-on-continuity-emergency-and-crisis-management::6.10.1.2 · 6.10.1.2 Continuity plan contents: stakeholders to notify, processes to maintain, roles, activation authority, critical technology and information, information security, alternative work sites and workarounds →The solutions or workarounds identified are recorded, applied and tested, and recovery steps are carried out so that the affected I&T-related service is brought back: the most suitable fix, whether a temporary workaround or a permanent solution, is chosen and...
cobit-2019::DSS02.05 · DSS02.05 Resolve and recover from incidents →FIRST CSIRT Services Framework v2.1 Service Area 3 - Vulnerability Management. SCOPE: discovery + tracking + remediation + disclosure of vulnerabilities affecting the constituency.
FIRST-CSIRTF-SA3-VulnMgmt · Service Area 3 - Vulnerability Management and Coordinated Disclosure →Requirement 0099 (Part Four: Technology, section 14.2.1 Cyber Security Strategies; applies to All entities; dated 31 October 2024; retained from Release 2025): Patch applications mitigation strategy is implemented to Maturity Level Two under ASD's Essential Ei...
protective-security-policy-framework-pspf-release-2026::0099 · 0099 Essential Eight: patch applications to Maturity Level Two →The bank can generate accurate and reliable risk data for normal and stress reporting, aggregated largely automatically to limit errors. Controls over risk data are as robust as those over accounting data;
bcbs-239::P3 · Principle 3: accuracy and integrity of risk data →Tool data identifies the tool and process it supports and, where applicable, the rationale and results of independent assessment, the tool designation by level, and its history with relevance justification;
do-254-ed-80-design-assurance-guidance-for-airborne-electronic-hardware::11.4.2 · 11.4.2 Tool assessment and qualification data →Questions people ask about workaround
What is Workaround?
Why is Workaround important for compliance?
Which compliance frameworks address Workaround?
Where can I learn more about Workaround?
See how Workaround applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.