New Zealand Information Security Manual (NZISM) 14.1.12.C.03: 14.1.12.C.03 Link characterisation to BCP, DRP and BIA

Agencies should consider characterisations alongside the business continuity plan or disaster recovery plan and any associated risk assessments and business impact analyses.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 14: Software security – New Zealand Information Security Manual (NZISM)

14.1.10.C.01 14.1.10.C.01 Remove default accounts and passwords on classified SOEs
14.1.10.C.02 14.1.10.C.02 Remove default accounts and passwords on all SOEs
14.1.11.C.01 14.1.11.C.01 Separate high-risk servers exposed to public networks
14.1.12.C.01 14.1.12.C.01 Characterise critical and high-risk servers
14.1.12.C.02 14.1.12.C.02 Approved algorithm for characterisation checksums
14.1.13.C.01 14.1.13.C.01 Review applications for unplanned outbound connections
14.1.13.C.02 14.1.13.C.02 Business decision on automated outbound connections
14.1.13.C.03 14.1.13.C.03 Consider DLP for software outbound connections

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls