CISA Cyber Resilience Review (CRR) v4.0
Service Continuity Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 SCM.1: Service continuity plans for high-value services are developed

What does SCM.1 require?

Documented continuity plans cover the people, information, technology and facilities the critical service needs and are, using established standards, guidelines and templates; staff are assigned to execute specific plans, key contacts are listed, plans are stored under control and available to those who need them, availability requirements such as recovery time and recovery point objectives are set, and mechanisms such as failsafe, load balancing and hot swap are implemented to meet resilience requirements in normal and adverse conditions.

Maintained by Gerard Blokdyk

Other controls in Service Continuity Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.