Japan FSA Cybersecurity Guidelines for Financial Institutions
2.2 Identification of cybersecurity risks – Japan FSA Cybersecurity Guidelines for Financial Institutions

Japan FSA Cybersecurity Guidelines for Financial Institutions 2.2.5-D: 2.2.5 Exercises and training: desirable actions

What does 2.2.5-D require?

In recovery drills on real equipment, confirm recovery procedures for systems and data and the validity of RPO and RTO; exercise scenarios with serious sector-wide spillover, such as large and prolonged incidents or loss of connection to exchanges or clearing and settlement institutions; re-exercise remediations to verify them or obtain management approval to accept residual risk; and combine internal, vendor, sector and authority-hosted exercises according to scale and characteristics.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 2.2 Identification of cybersecurity risks – Japan FSA Cybersecurity Guidelines for Financial Institutions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Japan FSA Cybersecurity Guidelines for Financial Institutions controls