APRA CPS 220 Risk Management CPS220-14: Scenario Analysis and Stress Testing Programs

What else in your programme already covers this

This control maps to 10 controls across 8 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-ID.RA-03 Internal and external threats to the organization are identified and recorded
NIST-CSF-ID.RA-04 Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded

C5 (Germany) · 1 control

C5-BCM-02 Business impact analysis policies and instructions

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-BCR-02 Risk Assessment and Impact Analysis

FedRAMP High · 1 control

CP-4 Contingency Plan Testing

FedRAMP Moderate · 1 control

CP-4 Contingency Plan Testing

NIST SP 800-161 Rev 1 · 1 control

161R1-CP-4 Contingency Plan Testing

NIST SP 800-53 Rev 5 · 1 control

NIST800-RA-3 RA-3 Risk Assessment

SOC 2 · 1 control

SOC2-CC9.1 CC9.1 Mitigating risks of business disruption

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.