Japan FSA Cybersecurity Guidelines for Financial Institutions 2.5.1-B: 2.5.1 Incident response plan and contingency plan: basic actions

Set incident response plans and contingency plans (including recovery plans) for each type of attack (DDoS, website defacement, malware and ransomware including targeted attacks, exploitation of vulnerabilities to steal information, attacks causing fraudulent transfers), defining response priorities, recovery time objectives and recovery levels, and review them regularly or as needed.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2.5 Incident response and recovery – Japan FSA Cybersecurity Guidelines for Financial Institutions

2.5.1-D 2.5.1 Incident response plan and contingency plan: desirable actions
2.5.2.1-B 2.5.2.1 Initial response (detection, intake, triage): basic actions
2.5.2.2-B 2.5.2.2 Analysis: basic actions
2.5.2.3-B 2.5.2.3 Customer response, internal and external coordination, public relations: basic actions
2.5.2.4-B 2.5.2.4 Containment: basic actions
2.5.2.4-D 2.5.2.4 Containment: desirable actions
2.5.2.5-B 2.5.2.5 Eradication: basic actions
2.5.2.6-B 2.5.2.6 Recovery: basic actions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Japan FSA Cybersecurity Guidelines for Financial Institutions controls