ISO 22301:2019
Support, ISO 22301:2019

ISO 22301:2019 7.5.1: General

The BCMS must include both the documented information the standard requires and whatever further documented information the organization itself judges necessary for the BCMS to be effective.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 43 controls across 26 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

PCI DSS 4.0 · 11 controls

  • 1.1.1 1.1.1 Requirement 1 policies and procedures governed
  • 1.2.3 1.2.3 Accurate network diagram of CDE connections
  • 1.2.4 1.2.4 Accurate data-flow diagram for account data
  • 11.1.1 11.1.1 Requirement 11 policies and procedures managed
  • 12.1.1 12.1.1 Overall information security policy established and disseminated
  • 12.1.2 12.1.2 Security policy reviewed annually and updated as needed
  • 2.1.1 2.1.1 Requirement 2 policies and procedures governed
  • 4.1.1 4.1.1 Requirement 4 policies and procedures maintained and communicated
  • 7.1.1 7.1.1 Requirement 7 policies and procedures maintained
  • 8.3.8 8.3.8 Authentication policies communicated to users
  • 9.1.1 9.1.1 Requirement 9 policies and procedures maintained

NIST SP 800-53 Rev 5 · 3 controls

HIPAA Security Rule · 2 controls

ISO 27001:2022 · 2 controls

  • 5.29 Information security during disruption
  • 5.37 Documented operating procedures

NIST SP 800-66 Rev 2 · 2 controls

SOC 2 · 2 controls

  • SOC2-A1.3 A1.3 Testing recovery plan procedures
  • SOC2-CC5.3 CC5.3 Deploying controls through policies and procedures (COSO principle 12)
  • CPS230-P27 Comprehensive Assessment of the Operational Risk Profile

C5 (Germany) · 1 control

  • C5-SP-01 Documentation, communication and provision of policies and instructions

CMMC 2.0 · 1 control

ISO 13485:2016 · 1 control

  • 4.1 General requirements

ISO 14001:2015 · 1 control

ISO 14004:2016 · 1 control

  • 8.1.1 General guidance: Operational control

ISO 19011:2018 · 1 control

ISO 22000:2018 · 1 control

ISO 27002:2022 · 1 control

  • 5.37 Documented operating procedures

ISO 27701:2019 · 1 control

  • 7.5.1 Identify basis for PII transfer between jurisdictions

ISO 28002:2011 · 1 control

  • A.5.4 A.5.4 Documentation

ISO 37001:2016 · 1 control

ISO 37301:2021 · 1 control

  • 7.5.1 Documented information: general

ISO 45001:2018 · 1 control

ISO 9001:2015 · 1 control

ISO/IEC 42001:2023 · 1 control

  • 6.1 General concepts

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Support, ISO 22301:2019

You are reading one control. How much of ISO 22301:2019 have you already done?

ISO 22301:2019 7.5.1 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 22301:2019 your existing evidence covers. Hold APRA CPS 230 Operational Risk Management and 28 of 57 ISO 22301:2019 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the APRA CPS 230 Operational Risk Management pair alone.

Query this from an agent

The graph holds this control, the 43 it maps to, and the evidence behind each claim, over MCP and REST.