MITRE D3FEND MITRE-D3FEND-Evict-Tactic-Credential-Process-Eviction-Containment-Incident-Response-Recovery: MITRE D3FEND Evict Tactic + Credential + Process Eviction + Containment + Incident Response + Recovery

What else in your programme already covers this

This control maps to 37 controls across 21 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

API 1164 · 3 controls

API1164-17 Wireless and Field Communications
API1164-18 Field Device Security
API1164-19 Safety Instrumented Systems Interface

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-34 Regular backups (Essential)
ASD37-35 Business continuity and disaster recovery plans (Very Good)
ASD37-36 System recovery capabilities (Very Good)

ISO/IEC 27031:2011 · 3 controls

27031-8.1 Exercising and Testing
27031-8.2 Maintaining IRBC
27031-9.3 Management Review

FedRAMP Rev 5 · 2 controls

FedRAMP-Boundary Authorization Boundary, SSP, SAR, POA&M documentation
FedRAMP-IncidentReporting FedRAMP incident reporting to PMO and US-CERT

IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4) · 2 controls

IMO-MSC-FAL-Recover-BackupRestore-ContinuityOfNavigation-LessonsLearned-Drills IMO MSC-FAL Recover Function - Backup and Restore + Continuity of Navigation + Continuity of Cargo Operations + Continuity of Propulsion + Lessons Learned + Drills + Resilience
IMO-MSC-FAL-Respond-IncidentResponse-Communication-FlagState-PortAuthority-CIRT-USCGNVIC IMO MSC-FAL Respond Function - Incident Response Plan + Containment + Communication + Flag State + Port Authority + USCG NVIC + Class Society Notification + CIRT

NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems · 2 controls

NISTSP34-2 Business Impact Analysis (BIA): Critical Resources, Recovery Priorities
NISTSP34-4 Information System Contingency Plan (ISCP) Development

ASIS SPC.1-2009 - Organizational Resilience Standard · 1 control

4.4.8 Business Continuity and Recovery

FIRST CSIRT Services Framework and Standards · 1 control

FIRST-CSIRTF-SA2-ISIM Service Area 2 - Information Security Incident Management (Intake, Analysis, Containment, Recovery, Coordination, Crisis)

GAMP 5 - Good Automated Manufacturing Practice · 1 control

GAMP5-Supplier-Operations-Change-Periodic Supplier Assessment, Operational Phase, Change Control and Periodic Review

GLBA · 1 control

GLBA-Subordinate-Rules-Operationalisation GLBA Operationalisation through FTC Safeguards Rule, Privacy Rule, SEC Reg S-P and Banking-Agency Guidelines

HKMA SPM · 1 control

HKMA-SPM-OR-RR-SA-OperationalResilience HKMA SPM Operational Risk (OR-1), Operational Resilience (OR-2), Recovery Planning (RR-1), Outsourcing (SA-2)

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 1 control

IACS-UR-E26-Respond-Recover-IncidentResponse-Recovery-Backup-Lessons IACS UR E26 Respond + Recover Goals - Incident Response + Communication + Recovery + Backup + Lessons Learned

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 1 control

IAEA-NSS17-Detect-Monitor-Logging-IR-Recovery-Exercises IAEA NSS-17 - Detection + Monitoring + Logging + Incident Response + Recovery + Computer Security Exercises

IEEE 1686 · 1 control

IEEE1686-IR-Recovery-Reporting-Exercises-Drills-RECOV IEEE 1686 - Incident Response + Recovery from Failed Update + Reporting to Authorities + Coordination with Sector-Specific Agencies + Exercises and Drills

ISMAP (Japan) · 1 control

ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM

ISO/IEC 27011:2024 · 1 control

27011-8.6 Data protection and backup

Japan FSA Cybersecurity Guidelines for Financial Institutions · 1 control

JP-FSA-CYB-Incident-Response-Playbooks-Containment-Eradication-Recovery-Post-Mortem-Tabletop-CSIRT Japan FSA Cybersecurity Incident Response + Playbooks + Containment + Eradication + Recovery + Post-Mortem + Tabletop Exercises + CSIRT + FSA Notification + Customer Communication + Forensics + Lessons Learned

MITRE ATT&CK · 1 control

MITRE-ATTACK-Detection-Data-Sources-Analytics-Sigma-Splunk-KQL-Yara-Snort-SIEM-Hunt-Engineering MITRE ATT&CK Detection + Data Sources + Analytics + Sigma + SPL + KQL + Yara + Snort + SIEM + Hunt

OWASP ASVS · 1 control

OWASPASVS-8 Data Protection (V8 + V8.3)

UK Defence Standard 05-138 - Cyber Security for Defence Suppliers · 1 control

D.3 Backup and Recovery

US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements · 1 control

CYB-5 Cyber Incident Response Plan

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.