+PR.IP Information Protection Processes and Procedures
---+PR.IP-01 A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. …
---+PR.IP-02 A System Development Life Cycle to manage systems is implemented
---+PR.IP-03 Configuration change control processes are in place
---+PR.IP-04 Backups of information are conducted, maintained, and tested
---+PR.IP-05 Policy and regulations regarding the physical operating environment for organizational assets are met
---+PR.IP-06 Data is destroyed according to policy
---+PR.IP-07 Protection processes are improved
---+PR.IP-08 Effectiveness of protection technologies is shared
---+PR.IP-09 Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed
---+PR.IP-10 Response and recovery plans are tested
---+PR.IP-11 Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)
---+PR.IP-12 A vulnerability management plan is developed and implemented

PR.IP Information Protection Processes and Procedures

Statement

1. Oversigt

PR.IP-01 A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. …

Statement

A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)
PR.IP-02 A System Development Life Cycle to manage systems is implemented

Statement

A System Development Life Cycle to manage systems is implemented
PR.IP-03 Configuration change control processes are in place

Statement

Configuration change control processes are in place
PR.IP-04 Backups of information are conducted, maintained, and tested

Statement

Backups of information are conducted, maintained, and tested
PR.IP-05 Policy and regulations regarding the physical operating environment for organizational assets are met

Statement

Policy and regulations regarding the physical operating environment for organizational assets are met
PR.IP-06 Data is destroyed according to policy

Statement

Data is destroyed according to policy
PR.IP-07 Protection processes are improved

Statement

Protection processes are improved
PR.IP-08 Effectiveness of protection technologies is shared

Statement

Effectiveness of protection technologies is shared
PR.IP-09 Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed

Statement

Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed
PR.IP-10 Response and recovery plans are tested

Statement

Response and recovery plans are tested
PR.IP-11 Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)

Statement

Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)
PR.IP-12 A vulnerability management plan is developed and implemented

Statement

A vulnerability management plan is developed and implemented

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer