Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >RESPONSE
  4. >Address Cybersecurity In Continuity Of Operations
  5. >AESCSF-RESPONSE-4h
AESCSF-RESPONSE-4hActive

Cybersecurity incident criteria that trigger the execution of continuity plans are established and communicated to in...

Statement

Cybersecurity incident criteria that trigger the execution of continuity plans are established and communicated to incident response and continuity management personnel

Context and Guidance: A link should be established between incident response and continuity activities. Determine the conditions under which a continuity plan must be executed and ensure that the incident response personnel and owners of continuity plans understand these conditions.

Location

Domain
RESPONSE
Objective
Address Cybersecurity in Continuity of Operations

Practice Details

Identifier
AESCSF-RESPONSE-4h
Type
Practice
Domain
RESPONSE
Objective
Address Cybersecurity in Continuity of Operations

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
ISM
ISM-0043relatedvia aescsf-reference
C2M2
C2M2-RESPONSE-4Hequivalentvia derived-shared-practice-structure
View in graphReport an issue
← Back to Address Cybersecurity in Continuity of Operations
Address Cybersecurity in Continuity of Operations16 controls
AESCSF-RESPONSE-4aContinuity plans are developed to sustain and restore operation of the function if a cybersecurity event or incident ...AESCSF-RESPONSE-4bData backups are available and tested, at least in an ad hoc mannerAESCSF-RESPONSE-4cIT and OT assets requiring spares are identified, at least in an ad hoc mannerAESCSF-RESPONSE-4dContinuity plans address potential impacts from cybersecurity incidentsAESCSF-RESPONSE-4eThe assets and activities necessary to sustain minimum operations of the function are identified and documented in co...AESCSF-RESPONSE-4fContinuity plans address IT, OT, and information assets that are important to the delivery of the function, including...AESCSF-RESPONSE-4gRecovery time objectives (RTOs) and recovery point objectives (RPOs) for assets that are important to the delivery of...AESCSF-RESPONSE-4hCybersecurity incident criteria that trigger the execution of continuity plans are established and communicated to in...AESCSF-RESPONSE-4iContinuity plans are tested through evaluations and exercises periodically and according to defined triggers, such as...AESCSF-RESPONSE-4jCybersecurity controls protecting backup data are equivalent to or more rigorous than controls protecting source dataAESCSF-RESPONSE-4kData backups are logically or physically separated from source dataAESCSF-RESPONSE-4lSpares for selected IT and OT assets are availableAESCSF-RESPONSE-4mContinuity plans are aligned with identified risks and the organisation’s threat profile (THREAT-2e) to ensure covera...AESCSF-RESPONSE-4nContinuity plan exercises address higher priority risksAESCSF-RESPONSE-4oThe results of continuity plan testing or activation are compared to recovery objectives, and plans are improved acco...AESCSF-RESPONSE-4pContinuity plans are periodically reviewed and updated