Belgium CyberFundamentals BE-CF-20: Incident reporting and notification

What else in your programme already covers this

This control maps to 22 controls across 9 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

API 1164 · 3 controls

API1164-17 Wireless and Field Communications
API1164-18 Field Device Security
API1164-19 Safety Instrumented Systems Interface

APPI · 2 controls

APPI-A41 Preparation and Handling of Pseudonymized Personal Information
APPI-A43 Preparation of Anonymized Personal Information

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

ASD37-31 Hunt to discover incidents (Very Good)
ASD37-33 Capture network traffic (Limited)

ISO/IEC 30111:2019 · 2 controls

30111-3 Terms and definitions
30111-5.2 Vulnerability handling team

ASIS SPC.1-2009 - Organizational Resilience Standard · 1 control

4.4.7 Emergency and Incident Response

Barbados Data Protection Act 2019 · 1 control

BB-DPA-20 Sections 50-60 - Registration and Responsibilities

ISO/IEC 27010:2015 · 1 control

27010-16.1 Continuity of Sharing

ISO/IEC 27400:2022 · 1 control

27400-6.5 Security monitoring and incident response

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-RS.CO-02 Internal and external stakeholders are notified of incidents

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.