SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Business Continuity

18 controles en 6 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0289Alternate work sites4 mapeosThe company formally plans for employees to work from alternative locations if primary offices become unavailableRCF-0292BCP exercises5 mapeosBusiness continuity plans are formally exercised on a regular schedule to validate their effectivenessRCF-0280Business impact analysis4 mapeosThe company formally analyses which business functions would be most affected if systems or services became unavailableRCF-0283Continuity plans5 mapeosFormal plans exist for maintaining critical business operations during and after a significant disruptionRCF-0286Crisis management4 mapeosA formal crisis management framework defines how leadership responds to significant business disruptionsRCF-0295Supply chain continuity6 mapeosThe company formally assesses whether key suppliers can continue to support operations during a disruption

Proceso

RCF-0290Alternate work sites4 mapeosAlternate site arrangements are consistently tested and employees know how to activate themRCF-0293BCP exercises5 mapeosBCP exercises are consistently conducted and findings are used to improve the plansRCF-0281Business impact analysis4 mapeosBusiness impact assessments are consistently updated as business priorities and systems changeRCF-0284Continuity plans5 mapeosBusiness continuity plans are consistently reviewed and kept current with organisational changesRCF-0287Crisis management4 mapeosCrisis response procedures are consistently activated and escalation paths are followed during major incidentsRCF-0296Supply chain continuity6 mapeosSupply chain continuity risks are consistently reviewed and alternative supplier arrangements are maintained

Técnica

RCF-0291Alternate work sites7 mapeosTechnical infrastructure supports secure remote access so staff can operate effectively from alternative locationsRCF-0294BCP exercises4 mapeosTechnical tools support realistic simulation of business continuity scenarios for training and validationRCF-0282Business impact analysis4 mapeosTechnical tools support structured business impact analysis and map dependencies between systems and processesRCF-0285Continuity plans5 mapeosTechnical tools support continuity plan management and provide access to plans when normal systems are unavailableRCF-0288Crisis management4 mapeosTechnical communication tools support crisis team coordination when primary systems are unavailableRCF-0297Supply chain continuity5 mapeosTechnical monitoring provides visibility of supplier status and alerts when critical dependencies are at risk

Esta familia en ISO/IEC 27001:2022

Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.

A.5.30 ICT readiness for business continuityA.5.29 Information security during disruptionA.8.14 Redundancy of information processing facilitiesA.5.22 Monitoring, review and change management of supplier servicesA.5.19 Information security in supplier relationshipsA.5.21 Managing information security in the ICT supply chainA.8.16 Monitoring activitiesA.5.26 Response to information security incidentsA.6.7 Remote working

Esta familia en NIST CSF 2.0

PR.IR-04 Adequate capacity maintainedRC.RP-01 Recovery plan executedRC.RP-02 Recovery actions performedPR.IR-03 Resilience mechanisms implementedGV.SC-07 Supplier risk managed over relationshipRS.CO-02 Stakeholders notifiedRC.RP-03 Backup integrity verified

Esta familia en Cyber Essentials

CE4.3 Require multi-factor authenticationCE1.3 Block unauthenticated inbound trafficCE1.2 Protect the administrative interface
Pregúntale a Sekura: «¿Qué evidencia demuestra Business Continuity?»
También vía MCP, gratis con cuenta