BCR-02: Business Continuity Testing
Control Family:
Next Version:
- Cloud Controls Matrix v4.0:
- SEF-04: Incident Response Testing
The next version of the control set incorporates all or part of this control into: BCR-06: Business Continuity Exercises, BCR-07: Communication, SEF-03: Incident Response Plans.
Control Statement
Business continuity and security incident response plans shall be subject to testing at planned intervals or upon significant organizational or environmental changes. Incident response plans shall involve impacted customers (tenant) and other business relationships that represent critical intra-supply chain business process dependencies.
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.