Requirement
In addition to subcontrols in the ECC control 3-1-3, the CST shall cover the following additional subcontrols for cybersecurity requirements for cybersecurity resilience aspects of business continuity management, as a minimum:
Sub-Controls
3-1-T-1-1
Requirement: Developing and implementing disaster recovery and business continuity procedures related to cloud computing, in a secure manner.
References
- ECC – 2:2024 equivalent: 3-1-3