PM-8: Critical Infrastructure Plan

Control Family:

Program Management

CSF v1.1 References:


  • Low


  • Moderate


  • High


Next Version:

Control Statement

The organization addresses information security issues in the development, documentation, and updating of a critical infrastructure and key resources protection plan.

Supplemental Guidance

Protection strategies are based on the prioritization of critical assets and resources. The requirement and guidance for defining critical infrastructure and key resources and for preparing an associated critical infrastructure protection plan are found in applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.