Maintain Business Continuity Plans for NIS2 Compliance
What this control requires
Develop and maintain business continuity plans covering: system backup procedures and recovery capabilities, crisis management procedures, and emergency communication plans. Test BCP at least annually. Ensure ICT continuity plans address NIS2-relevant disruption scenarios. Train key personnel. Maintain evidence of testing and improvement actions.
Other NIS2 controls
EU_NIS2-CTRL-001 - Daily safeguarding reconciliationEU_NIS2-CTRL-002 - Critical ICT incident reportingEU_NIS2-CTRL-003 - GDPR breach notification workflowEU_NIS2-CTRL-004 - AML suspicious transaction monitoringEU_NIS2-CTRL-005 - Quarterly PCI vulnerability assessmentEU_NIS2-CTRL-006 - Outsourcing provider oversightEU_NIS2-CTRL-007 - DORA Register of Information maintenanceEU_NIS2-CTRL-008 - CTIF suspicious activity escalationEU_NIS2-CTRL-009 - NIS2 cyber resilience testingEU_NIS2-CTRL-010 - Instant payment availability monitoringNIS2-A20-001 - Management Body Cybersecurity Training and OversightNIS2-A21-001 - NIS2 Cybersecurity Risk Management Measures