Japan FSA Cybersecurity Guidelines for Financial Institutions 2.5.1-D: 2.5.1 Incident response plan and contingency plan: desirable actions

Also prepare contingency plans for large-scale cyber incidents, such as incidents at fund clearing or payment infrastructure, or long unavailability of services provided by third parties including data centres and cloud.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2.5 Incident response and recovery – Japan FSA Cybersecurity Guidelines for Financial Institutions

2.5.1-B 2.5.1 Incident response plan and contingency plan: basic actions
2.5.2.1-B 2.5.2.1 Initial response (detection, intake, triage): basic actions
2.5.2.2-B 2.5.2.2 Analysis: basic actions
2.5.2.3-B 2.5.2.3 Customer response, internal and external coordination, public relations: basic actions
2.5.2.4-B 2.5.2.4 Containment: basic actions
2.5.2.4-D 2.5.2.4 Containment: desirable actions
2.5.2.5-B 2.5.2.5 Eradication: basic actions
2.5.2.6-B 2.5.2.6 Recovery: basic actions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Japan FSA Cybersecurity Guidelines for Financial Institutions controls