Frameworks / API 1164 / 18 API 1164
API 1164: Incident Response & Recovery
API 1164 18: Field Device Security Apply hardening, authenticated commands, and tamper resistance to field devices including RTUs, PLCs, and meters.
What else in your programme already covers this This control maps to 379 controls across 181 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
ASD37-31 Hunt to discover incidents (Very Good) ASD37-33 Capture network traffic (Limited) ASD37-34 Regular backups (Essential) ASD37-35 Business continuity and disaster recovery plans (Very Good) ASD37-36 System recovery capabilities (Very Good) NIST-CSF-ID.IM-04 Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved NIST-CSF-RC.RP-01 The recovery portion of the incident response plan is executed once initiated from the incident response process NIST-CSF-RC.RP-06 The end of incident recovery is declared based on criteria, and incident-related documentation is completed NIST-CSF-RS.MA-01 The incident response plan is executed in coordination with relevant third parties once an incident is declared NIST-CSF-RS.MA-05 The criteria for initiating incident recovery are applied FFIEC-12 Disaster recovery procedures FFIEC-23 Regulatory reporting requirements FFIEC-24 Customer notification procedures FFIEC-25 Post-incident review and improvement NDPA-1 Applicability, Scope, and Carve-Outs NDPA-2 Consumer Rights - Access, Correct, Delete, Portability, Appeal NDPA-5 Privacy Notice, Data Minimisation, and Purpose Limitation NDPA-6 Reasonable Security Practices and Incident Response NG-NDPA-1 Scope, Applicability, and Establishment of Nigeria Data Protection Commission NG-NDPA-2 Lawful Basis, Consent, and Data Protection Principles NG-NDPA-5 Security of Processing, Breach Notification, and DPIA NG-NDPA-6 Data Protection Officer, DPCO, and Processor Agreements SOC2-A1.2 Environmental protections, data backups, and recovery infrastructure support availability SOC2-A1.3 Recovery plan procedures support system recovery from failures SOC2-CC7.4 Responds to identified security incidents through defined procedures SOC2-CC7.5 Identifies the root cause of security incidents BSI-18 Incident response planning and testing BSI-20 Incident reporting and notification BSI-21 Forensic analysis capabilities BE-CF-20 Incident reporting and notification BE-CF-21 Forensic analysis capabilities BE-CF-22 Lessons learned and improvement 3.6 Encrypt Data on End-User Devices 3.6.1 Procedures are defined and implemented to protect cryptographic keys used to protect stored account data against disclosure and misuse that include: • Access to keys is restricted to the fewest number of custodians necessary. FEDRAMP-CP-9 System Backup OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery OSFIB13-7 Incident Reporting to OSFI and Regulatory Coordination OSFIB13-8 Metrics, Monitoring, Continuous Improvement, Maturity PSDTWO-2 SCA Exemptions and Risk-Based Authentication PSDTWO-3 Common and Secure Communication, API Access for AISPs and PISPs PSDTWO-4 Fraud Reporting and Incident Management D.1 Incident Response Planning D.2 Incident Reporting D.3 Backup and Recovery APPI-A41 Preparation and Handling of Pseudonymized Personal Information APPI-A43 Preparation of Anonymized Personal Information CPS234-21 Implementation of Information Security Controls CPS234-25 Internal Audit Review of Information Security Controls 4.4.7 Emergency and Incident Response 4.4.8 Business Continuity and Recovery BB-DPA-20 Sections 50-60 - Registration and Responsibilities BB-DPA-22 Sections 70-75 - Commissioner Functions NISTSP144-6 Availability, Resilience, BCP/DR, and SLA Management NISTSP144-8 Monitoring, Incident Response, Exit Strategy, and Compliance NISTSP145-3 Rapid Elasticity Characteristic and Capacity Management NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition NISTSP146-6 Cloud Security and Privacy Recommendations NISTSP146-7 Service Level, Performance, Reliability, Interoperability, and Portability NISTSP82-7 OT Incident Response, Forensics, Recovery, and Continuity NISTSP82-8 OT Supply Chain Security, Asset Lifecycle, and Physical Security NISTSP34-2 Business Impact Analysis (BIA): Critical Resources, Recovery Priorities NISTSP34-4 Information System Contingency Plan (ISCP) Development NGCB-1 Regulation 5.260 Scope, Applicability, and Licensee Categories NGCB-6 Incident Response, 72-Hour NGCB Notification, and Independent Investigation NJDPA-2 Consumer Rights - Access, Correct, Delete, Portability, Appeal NJDPA-6 Reasonable Data Security and Incident Response OMANCS-6 Security Monitoring, Detection, Incident Response, and OmanCERT Notification OMANCS-7 Business Continuity, Disaster Recovery, and Resilience OPENBANK-7 Logging, Monitoring, Regulatory Reporting, SLA, Availability OPENBANK-8 Incident Detection, Response, Customer Notification, Post-Incident Review, BCM PERU-7 DPO, Records, Retention, Marketing, Training PERU-8 Breach Notification, ANPD Cooperation, Sanctions, Compliance QATAR-5 Security of Processing QATAR-8 Breach Notification, Compliance, Enforcement CYB-5 Cyber Incident Response Plan USMTSA-2 Cybersecurity Assessment and CSO Designation PMF-M.4 Privacy Incident Management CPS230-13 Board Accountability for Operational Risk Management CA-12 Deploys Through Policies and Procedures DIQ-1 Data Integration and Interoperability FIRST-CSIRTF-SA2-ISIM Service Area 2 - Information Security Incident Management (Intake, Analysis, Containment, Recovery, Coordination, Crisis) FERPA-Safeguards-PTAC Data Security Safeguards for PII in Education Records (PTAC Best Practices, SPPO Guidance) 27400-6.5 Security monitoring and incident response NABERS-3 NABERS Water Performance Rating NAIC-5 Third Party Service Provider Oversight - Section 4(F)(3) and Section 5 NERCCIP-6 Incident Reporting and Response Planning + Recovery Plans (CIP-008 + CIP-009) NIS2I-3 Incident Handling Policy, Reporting Significance Criteria, and Business Continuity NISTPF-8 Protect-P Information Protection Processes (PR.PO-P) NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material NISTSP123-5 Server Operations - Patching, Malware, Logging, Backup NISTSP137-7 Incident Response Integration and Ongoing Authorization 3.6.1 Procedures are defined and implemented to protect cryptographic keys used to protect stored account data against disclosure and misuse that include: • Access to keys is restricted to the fewest number of custodians necessary. NISTSP63R4-4 Authenticator Lifecycle: Binding, Recovery, Replacement, Suspension, Revocation NISTSP88-5 Media Inventory, Tracking, Chain of Custody, and Sanitization Records NISTSP92-6 Log Retention: Policy, Tiered Storage, Backup, Secure Disposal, Legal Hold NRFCS-7 Detection, Logging, Incident Response, Breach Notification, and Fraud Detection NHPA-6 Reasonable Data Security and Breach Response NGNDPR-5 Security of Personal Data, Breach Notification, and DPIA under NDPR Section 2.6-Security NGOB-5 Fraud Monitoring, Incident Notification, and Reporting to CBN DSOMM-1 Culture, Organization, Education, and Governance OWASPMASVS-7 MASVS-RESILIENCE: Resilience Against Reverse Engineering OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management OSSFSC-8 Project Maintenance, Sustainability, Integration with Supply Chain Security OREGONCPA-3 Consent, Sensitive Data, Children and Teen Protections PASONE-6 Incident Management, Audit, Handover, Operational Phase, Decommissioning PDPASG-8 Data Breach Notification, Incident Response, and Enforcement PDPATH-8 Data Breach Notification, Complaints, Compliance, Enforcement POPIASA-5 Security Safeguards, Encryption, Access Control, Operator Obligations PAKPDPB-5 Security of Processing and Personal Data Breach Notification PNGCYBER-4 Incident Response, Investigation, Evidence Preservation, Data Retention NORWAY-8 Breach Notification, Complaints, Compliance, Enforcement NZPRV-7 Notifiable Privacy Breach Scheme PSPF24-1 Security Culture, Governance, Risk Management SHAREASSESS-4 Vulnerability Management, Patching, Application Security SUPCHAIN-2 Source Integrity - Branch Protection, Code Review, Two-Person Rule SGCYBER-1 Critical Information Infrastructure (CII) Designation and Registration TEFCAREC-1 Common Agreement Conformance and Onboarding TSAPIPE-2 OT/IT Network Segmentation and Access Control UAEVARA-1 Activity Licensing (Advisory, Exchange, Custody, Broker-Dealer, etc.) USSDWA-2 Cybersecurity Practices (Assessment, Access, Network, IR) VIETNAMCYBER-2 Prohibited Acts (Access, Interception, Forgery, Content) VPSHR-3 Implementation Guidance and Reporting Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in API 1164: Incident Response & Recovery Query this from an agent The graph holds this control, the 379 it maps to, and the evidence behind each claim, over MCP and REST.