ISO 22301:2019
Support, ISO 22301:2019

ISO 22301:2019 7.1: Resources

Determine and provide the resources needed to establish, implement, maintain and continually improve the BCMS.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 49 controls across 24 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 7 controls

ISO/IEC 38500:2024 · 6 controls

  • 5.10.3 Risk governance: outcomes
  • 5.11.3 Social responsibility: outcomes
  • 5.12.3 Viability and performance over time: outcomes
  • 5.7.3 Stakeholder engagement: outcomes
  • 5.8.3 Leadership: outcomes
  • 5.9.3 Data and decisions: outcomes

ISO 27001:2022 · 5 controls

  • 5.2 Information security roles and responsibilities
  • 5.9 Inventory of information and other associated assets
  • 7.1 Physical security perimeters
  • 8.13 Information backup
  • 8.6 Capacity management

PCI DSS 4.0 · 5 controls

  • 12.1.1 12.1.1 Overall information security policy established and disseminated
  • 12.1.3 12.1.3 Security roles defined and acknowledged by all personnel
  • 12.1.4 12.1.4 Executive ownership of information security formally assigned
  • 12.10.1 12.10.1 Incident response plan ready for activation
  • 12.6.3 12.6.3 Security awareness training on hire and annually with acknowledgment

SOC 2 · 4 controls

  • SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure
  • SOC2-CC1.3 CC1.3 Structures, reporting lines, authorities and responsibilities (COSO principle 3)
  • SOC2-CC1.4 CC1.4 Attracting, developing and retaining competent people (COSO principle 4)
  • SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets

ISO/IEC 42001:2023 · 2 controls

  • 7.1 Resources
  • A.4 Resources for AI systems

NIST SP 800-161 Rev 1 · 2 controls

  • CPS230-P41 BCP Execution Capability and Tolerance Breach Reporting

APRA CPS 234 · 1 control

  • CFTC-SS-23 Resources Sufficient to Fulfil Obligations

FedRAMP High · 1 control

  • CP-7 Alternate Processing Site

FedRAMP Moderate · 1 control

  • CP-7 Alternate Processing Site

ISO 14001:2015 · 1 control

ISO 22000:2018 · 1 control

  • 7.1 Resources

ISO 27002:2022 · 1 control

  • 8.6 Capacity management

ISO 27701:2019 · 1 control

  • 7.1 General

ISO 28002:2011 · 1 control

  • 4.4 4.4 Provision of resources for the resilience management policy

ISO 37301:2021 · 1 control

ISO 45001:2018 · 1 control

ISO 9001:2015 · 1 control

  • 7.1 Resources
  • NIST-CSF-GV.RR-03 Adequate resources are allocated commensurate with the cybersecurity risk strategy, roles, responsibilities, and policies

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Support, ISO 22301:2019

You are reading one control. How much of ISO 22301:2019 have you already done?

ISO 22301:2019 7.1 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 22301:2019 your existing evidence covers. Hold APRA CPS 230 Operational Risk Management and 28 of 57 ISO 22301:2019 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the APRA CPS 230 Operational Risk Management pair alone.

Query this from an agent

The graph holds this control, the 49 it maps to, and the evidence behind each claim, over MCP and REST.