Singapore Government Instruction Manual on ICT&SS Management (IM8)
Resilience and Incident Response

Singapore Government Instruction Manual on ICT&SS Management (IM8) IM8-RES.1: Business Continuity Planning

Agencies must develop and maintain business continuity plans for critical ICT systems and services.

What else in your programme already covers this

This control maps to 53 controls across 27 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 22313:2020 - Guidance on Business Continuity Management Systems · 3 controls

ISO 22316 · 3 controls

  • ISO22316-01 Organizational resilience and security - business continuity policy for building security and resilience
  • ISO22316-14 Supply chain continuity
  • ISO22316-15 Communication strategy during disruption

ISO 22317 · 3 controls

ISO 22318 · 3 controls

ISO/IEC 27031:2011 · 3 controls

NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management · 3 controls

FFIEC IT Examination Handbook · 2 controls

  • FFIEC-11 Business continuity planning and testing
  • FFIEC-12 Disaster recovery procedures

PCI P2PE · 2 controls

PCI PIN Security · 2 controls

PCI SSF · 2 controls

APRA CPS 230 Operational Risk Management · 1 control

  • CPS230-26 Critical Operations Register, Continuity Plan and Activation

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

  • ASD37-35 Business continuity and disaster recovery plans (Very Good)

ASIS SPC.1-2009 - Organizational Resilience Standard · 1 control

  • 4.4.8 Business Continuity and Recovery

Annex 11 to EU GMP - Computerised Systems · 1 control

BS 65000:2014 - Guidance on Organizational Resilience · 1 control

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence · 1 control

ISO 28001:2007 Supply Chain Security Management · 1 control

ISO/IEC 27010:2015 · 1 control

Monetary Authority of Singapore Technology Risk Management Guidelines · 1 control

NIS2 Directive Implementing Acts · 1 control

  • NIS2I-3 Incident Handling Policy, Reporting Significance Criteria, and Business Continuity

Nevada Gaming Control Board Cybersecurity Requirements · 1 control

  • NGCB-6 Incident Response, 72-Hour NGCB Notification, and Independent Investigation

OSFI B-13 · 1 control

  • OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery

Oman National Cybersecurity Framework · 1 control

  • OMANCS-7 Business Continuity, Disaster Recovery, and Resilience

Open Banking Security · 1 control

  • OPENBANK-8 Incident Detection, Response, Customer Notification, Post-Incident Review, BCM

PSD2 SCA · 1 control

  • PSDTWO-2 SCA Exemptions and Risk-Based Authentication

SOC for Cybersecurity - Cybersecurity Risk Management Examination · 1 control

South Korea ISMS-P · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Resilience and Incident Response

Query this from an agent

The graph holds this control, the 53 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Singapore Government Instruction Manual on ICT&SS Management (IM8) controls