CAF Outcome D1.a: Response Plan

From the UK NCSC's Cyber Assessment Framework (version 3.1):

You have an up-to-date incident response plan that is grounded in a thorough risk assessment that takes account of your essential function and covers a range of incident scenarios.

Cyber Threat Graph Context

Explore how this control relates to the wider threat graph

NCSC CAF Mapped to NIST CSF

D1.a: Response Plan to CSF mappings generated from UK Cabinet Office table.

Related ISA/IEC 62443 Controls

Clauses and controls from IEC 62443 (62443-2-1 and 62443-3-3) which are related to this CAF outcome, taken from mappings by Ofgem.

  • Communicate the incident response plan (4.3.4.5.2)
    ISA/IEC 62443-2-1:2009
  • Identify and respond to incidents (4.3.4.5.6)
    ISA/IEC 62443-2-1:2009
  • Implement an incident response plan (4.3.4.5.1)
    ISA/IEC 62443-2-1:2009

Related ISO 27001 Controls

Clauses and controls from ISO 27001 (2013) which are related to this CAF outcome, taken from mappings by Ofgem.

  • Response to information security incidents (16.1.5)
    ISO 27001:2013
  • Responsibilities and procedures (16.1.1)
    ISO 27001:2013

Related SP800-53 Controls

Generated from NISTs SP800-53/CSF Crosswalk mappings.