Requirement
In addition to subcontrols in the ECC control 3-1-3, the CSP shall cover the following additional subcontrols for cybersecurity requirements for cybersecurity resilience aspects of business continuity management, as a minimum:
Sub-Controls
3-1-P-1-1
Requirement: Developing and implementing disaster recovery and business continuity procedures in a secure manner.
3-1-P-1-2
Requirement: Developing and implementing procedures to ensure resilience and continuity of cybersecurity systems dedicated to the protection of Cloud Technology Stack.
References
- ECC – 2:2024 equivalent: 3-1-3
