BCR-02: Business Continuity Testing

PF v1.0 References:

Next Version:

Info icon.

The next version of the control set incorporates all or part of this control into: BCR-06: Business Continuity Exercises, BCR-07: Communication, SEF-03: Incident Response Plans.

Control Statement

Business continuity and security incident response plans shall be subject to testing at planned intervals or upon significant organizational or environmental changes. Incident response plans shall involve impacted customers (tenant) and other business relationships that represent critical intra-supply chain business process dependencies.

[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]

Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.