Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >RESPONSE
  4. >Address Cybersecurity In Continuity Of Operations
  5. >AESCSF-RESPONSE-4c
AESCSF-RESPONSE-4cActive

IT and OT assets requiring spares are identified, at least in an ad hoc manner

Statement

IT and OT assets requiring spares are identified, at least in an ad hoc manner

Context and Guidance: This practice is fundamental to restoring operations in the event of asset loss or failure. The organisation identifies, at least in an ad hoc manner, IT and OT assets for which spares may be needed. This practice initiates a progression of practices that continue in MIL2 and are focused on spare or redundant assets These are examples of spare or redundant IT and OT assets: • switches • routers • controllers • sensors • virtualised assets • systems on which assets rely, such as communications networks

Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: RESPONSE-4c, RESPONSE-4f, RESPONSE-4l.

Location

Domain
RESPONSE
Objective
Address Cybersecurity in Continuity of Operations

Practice Details

Identifier
AESCSF-RESPONSE-4c
Type
Practice
Domain
RESPONSE
Objective
Address Cybersecurity in Continuity of Operations

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
C2M2
C2M2-RESPONSE-4Cequivalentvia derived-shared-practice-structure
View in graphReport an issue
← Back to Address Cybersecurity in Continuity of Operations
Address Cybersecurity in Continuity of Operations16 controls
AESCSF-RESPONSE-4aContinuity plans are developed to sustain and restore operation of the function if a cybersecurity event or incident ...AESCSF-RESPONSE-4bData backups are available and tested, at least in an ad hoc mannerAESCSF-RESPONSE-4cIT and OT assets requiring spares are identified, at least in an ad hoc mannerAESCSF-RESPONSE-4dContinuity plans address potential impacts from cybersecurity incidentsAESCSF-RESPONSE-4eThe assets and activities necessary to sustain minimum operations of the function are identified and documented in co...AESCSF-RESPONSE-4fContinuity plans address IT, OT, and information assets that are important to the delivery of the function, including...AESCSF-RESPONSE-4gRecovery time objectives (RTOs) and recovery point objectives (RPOs) for assets that are important to the delivery of...AESCSF-RESPONSE-4hCybersecurity incident criteria that trigger the execution of continuity plans are established and communicated to in...AESCSF-RESPONSE-4iContinuity plans are tested through evaluations and exercises periodically and according to defined triggers, such as...AESCSF-RESPONSE-4jCybersecurity controls protecting backup data are equivalent to or more rigorous than controls protecting source dataAESCSF-RESPONSE-4kData backups are logically or physically separated from source dataAESCSF-RESPONSE-4lSpares for selected IT and OT assets are availableAESCSF-RESPONSE-4mContinuity plans are aligned with identified risks and the organisation’s threat profile (THREAT-2e) to ensure covera...AESCSF-RESPONSE-4nContinuity plan exercises address higher priority risksAESCSF-RESPONSE-4oThe results of continuity plan testing or activation are compared to recovery objectives, and plans are improved acco...AESCSF-RESPONSE-4pContinuity plans are periodically reviewed and updated