CISA Cyber Resilience Review (CRR) v4.0
Service Continuity Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 SCM.3: Service continuity plans are tested to ensure they meet their stated objectives

What does SCM.3 require?

Testing standards and a test schedule are in place, plans are tested, the backup and storage arrangements for high-value information are tested, and test results are compared with objectives to identify improvements.

Maintained by Gerard Blokdyk

Other controls in Service Continuity Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.