Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >RESPONSE
  4. >Address Cybersecurity In Continuity Of Operations
  5. >AESCSF-RESPONSE-4o
AESCSF-RESPONSE-4oActive

The results of continuity plan testing or activation are compared to recovery objectives, and plans are improved acco...

Statement

The results of continuity plan testing or activation are compared to recovery objectives, and plans are improved accordingly

Context and Guidance: Both continuity plan testing and activation of plans in actual incidents can provide insight about whether plans work as intended. After either a test or an activation of a plan, results should be compared with the plan’s recovery objectives, including any defined RTOs and RPOs. Areas where objectives could not be met should be recorded and strategies developed to review and revise the plan. Improvements to the testing process and plans should also be identified, documented, and incorporated into future tests. Continuity plan testing and activation may also reveal needed improvements due to • lack of sufficient resources • lack of appropriate resources • training gaps for plan staff and stakeholders • plan conflicts (if multiple plans are tested simultaneously) • infrastructure shortcomings

Related Practices • Input From: Implementing RESPONSE-4g provides input that may be useful for implementing this practice.

Location

Domain
RESPONSE
Objective
Address Cybersecurity in Continuity of Operations

Practice Details

Identifier
AESCSF-RESPONSE-4o
Type
Practice
Domain
RESPONSE
Objective
Address Cybersecurity in Continuity of Operations

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
C2M2
C2M2-RESPONSE-4Oequivalentvia derived-shared-practice-structure
ISO 27001
ISO27001-5.24relatedvia aescsf-reference
ISO27001-5.27relatedvia aescsf-reference
ISO27001-5.29relatedvia aescsf-reference
ISO27001-5.30relatedvia aescsf-reference
View in graphReport an issue
← Back to Address Cybersecurity in Continuity of Operations
Address Cybersecurity in Continuity of Operations16 controls
AESCSF-RESPONSE-4aContinuity plans are developed to sustain and restore operation of the function if a cybersecurity event or incident ...AESCSF-RESPONSE-4bData backups are available and tested, at least in an ad hoc mannerAESCSF-RESPONSE-4cIT and OT assets requiring spares are identified, at least in an ad hoc mannerAESCSF-RESPONSE-4dContinuity plans address potential impacts from cybersecurity incidentsAESCSF-RESPONSE-4eThe assets and activities necessary to sustain minimum operations of the function are identified and documented in co...AESCSF-RESPONSE-4fContinuity plans address IT, OT, and information assets that are important to the delivery of the function, including...AESCSF-RESPONSE-4gRecovery time objectives (RTOs) and recovery point objectives (RPOs) for assets that are important to the delivery of...AESCSF-RESPONSE-4hCybersecurity incident criteria that trigger the execution of continuity plans are established and communicated to in...AESCSF-RESPONSE-4iContinuity plans are tested through evaluations and exercises periodically and according to defined triggers, such as...AESCSF-RESPONSE-4jCybersecurity controls protecting backup data are equivalent to or more rigorous than controls protecting source dataAESCSF-RESPONSE-4kData backups are logically or physically separated from source dataAESCSF-RESPONSE-4lSpares for selected IT and OT assets are availableAESCSF-RESPONSE-4mContinuity plans are aligned with identified risks and the organisation’s threat profile (THREAT-2e) to ensure covera...AESCSF-RESPONSE-4nContinuity plan exercises address higher priority risksAESCSF-RESPONSE-4oThe results of continuity plan testing or activation are compared to recovery objectives, and plans are improved acco...AESCSF-RESPONSE-4pContinuity plans are periodically reviewed and updated