+PM-08 [P] Critical Infrastructure Plan

PM-08 [P] Critical Infrastructure Plan

Control

Address information security and privacy issues in the development, documentation, and updating of a critical infrastructure and key resources protection plan.

Discussion

Protection strategies are based on the prioritization of critical assets and resources. The requirement and guidance for defining critical infrastructure and key resources and for preparing an associated critical infrastructure protection plan are found in applicable laws, executive orders, directives, policies, regulations, standards, and guidelines.

Assessment Objective

  1. information security issues are addressed in the development of a critical infrastructure and key resources protection plan;
  2. information security issues are addressed in the documentation of a critical infrastructure and key resources protection plan;
  3. information security issues are addressed in the update of a critical infrastructure and key resources protection plan;
  4. privacy issues are addressed in the development of a critical infrastructure and key resources protection plan;
  5. privacy issues are addressed in the documentation of a critical infrastructure and key resources protection plan;
  6. privacy issues are addressed in the update of a critical infrastructure and key resources protection plan.

Assessment Method

Examine

Information security program plan privacy program plan critical infrastructure and key resources protection plan procedures addressing the development, documentation, and updating of the critical infrastructure and key resources protection plan HSPD 7 National Infrastructure Protection Plan other relevant documents or records

Interview

Organizational personnel with information security and privacy program planning and plan implementation responsibilities organizational personnel responsible for developing, documenting, and updating the critical infrastructure and key resources protection plan organizational personnel with information security and privacy responsibilities

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
is blocked by PM-08 [P] Critical Infrastructure Plan – Assessment Procedure
is blocked by Business Continuity Management System (BCMS)
is blocked by Statutory, Regulatory & Contractual Compliance