+DER.4.A14 Regular Checking and Improvement of Business Continuity Safeguards [Top Management] (H)

DER.4.A14 Regular Checking and Improvement of Business Continuity Safeguards [Top Management] (H)

All business continuity safeguards SHOULD be checked regularly or in case of major changes to see if they are still being adhered to and correctly implemented. Whether they are still suitable to achieve the defined objectives SHOULD be checked.

During this process, it SHOULD be determined whether technical safeguards are implemented and configured correctly, and whether organisational safeguards are implemented effectively and efficiently. In case of deviations, the causes of defects SHOULD be identified and measures for improvement initiated. The organisation's Top Management SHOULD approve the summary of results. Furthermore, a process that controls and monitors whether and how measures for improvement are implemented SHOULD be established. Delays SHOULD be reported promptly to Top Management.

The organisation's Top Management SHOULD specify how to coordinate the reviews. These examinations SHOULD be planned so that no relevant parts are skipped. In particular, the examinations performed in the areas of auditing, IT, security management, information security management, and business continuity management should be coordinated with each other. To this end, regulations SHOULD be in place that define who should which safeguards and when.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.18 Poor Planning or Lack of Adaptation