NIST CSF: ID.BE-5 Subcategory

From NIST's Cyber Security Framework (version 1):

Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress/attack, during recovery, normal operations)

Cyber Threat Graph Context

Explore how this control relates to the wider threat graph

CSF Mapped to SP800-53 Controls

Generated from NIST's SP800-53/CSF Crosswalk mappings.

Node
SA-14: Criticality Analysis
SA-13: Trustworthiness
CP-2: Contingency Plan
CP-11: Alternate Communications Protocols

Related ISO 27001 Controls

Annex A controls from ISO 27001 (2013) which are related to this CSF subcategory, taken from mappings by NIST and additional data from Ofgem.

  • Implementing information security continuity (17.1.2)
    ISO 27001:2013
  • Planning information security continuity (17.1.1)
    ISO 27001:2013
  • Protecting against external and environmental threats (11.1.4)
    ISO 27001:2013
  • Availability of information processing facilities (17.2.1)
    ISO 27001:2013

MITRE ATT&CK Techniques

See which MITRE ATT&CK techniques this control helps to protect against. This is based on mappings to associated SP800-53 controls.

ATT&CK ID Title Associated Tactics
T1561 Disk Wipe Impact
T1561.001 Disk Content Wipe Impact
T1486 Data Encrypted for Impact Impact
T1490 Inhibit System Recovery Impact
T1491.001 Internal Defacement Impact
T1485 Data Destruction Impact
T1561.002 Disk Structure Wipe Impact
T1491.002 External Defacement Impact
T1491 Defacement Impact