Authorised Economic Operator (AEO) Programmes - Global Standards AEO-12: Crisis Management and Incident Recovery

What else in your programme already covers this

This control maps to 30 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 22301:2019 · 3 controls

8.4.2 Response structure
8.4.4 Business continuity plans
8.5 Exercise programme

ISO 27001:2022 · 3 controls

5.24 Information security incident management planning and preparation
5.29 Information security during disruption
5.30 ICT readiness for business continuity

ISO 27002:2022 · 3 controls

5.24 Information security incident management planning and preparation
5.29 Information security during disruption
5.30 ICT readiness for business continuity

SOC 2 · 3 controls

SOC2-A1.3 A1.3 Testing recovery plan procedures
SOC2-CC7.4 CC7.4 Responding to security incidents
SOC2-CC9.1 CC9.1 Mitigating risks of business disruption

CIS Controls v8 · 2 controls

CIS-11.1 Establish and Maintain a Data Recovery Process
CIS-17.4 Establish and Maintain an Incident Response Process

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-BCR-01 Business Continuity Management Policy and Procedures
CCM-BCR-09 Disaster Response Plan

FedRAMP High · 2 controls

CP-2 Contingency Plan
CP-3 Contingency Training

FedRAMP Moderate · 2 controls

CP-2 Contingency Plan
CP-3 Contingency Training

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-ID.IM-04 Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved
NIST-CSF-RC.RP-01 The recovery portion of the incident response plan is executed once initiated from the incident response process

NIST SP 800-53 Rev 5 · 2 controls

NIST800-CP-2 CP-2 Contingency Plan
NIST800-CP-3 CP-3 Contingency Training

Azure Security Benchmark · 1 control

ASBv3-IR-1 Preparation - update incident response plan and handling process

CMMC 2.0 · 1 control

IR.L2-3.6.1 Incident Handling

HIPAA Security Rule · 1 control

164.308(a)(7)(i) Contingency Plan (Standard)

NIST SP 800-171 Rev 3 · 1 control

03.06.05 Incident Response Plan

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(7)(i) Contingency Plan (Standard)

PCI DSS 4.0 · 1 control

12.10.1 12.10.1 Incident response plan ready for activation

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.