CIR Standards: Related to Cybersecurity

CIR Related Standards

Importance of Standards implementing CIR

1. Overview of Relevant Standards

This chapter focuses on the relevant Standards of BCM and CIR. The specific ISO 27000 standards and frameworks to be discussed are shown below.

2. Why Are Standards Important?

Standards are viewed as recommended guidelines that are considered the industry’s best practices. By adopting these standards, an organization can be internationally recognized as conducting the best practices to manage their organization and, in this case, implement CIR with BCM.

3. Related Standards

A review of the cyber security (ISO 27000 Family) and Business Continuity Management (ISO 22300 Family) standards specific to its incident response and some of the related standards are as follows:

3.1 ISO 22300 Family

• ISO 22301 Societal Security – Business Continuity Management Systems – Requirements

3.2 ISO 27000 Family

• ISO 27001 Information technology – Security Techniques – Information Security Management Systems – Requirements;
• ISO 27002 Information Technology – Security Techniques – Code of practice for information security controls;
• ISO 27004 Information Technology – Security Techniques – Information Security Management – Monitoring, Measurement, Analysis, and Evaluation;
• ISO 27031 Information Technology – Security Techniques – Guidelines for information and communication technology readiness for business continuity;
• ISO 27032 Information Technology – Security Techniques – Guidelines for cyber security;
  
• ISO 27033 Information Technology – Security Techniques – Network Security;
• ISO 27035 Information Technology – Security Techniques – Information security incident management;
• ISO 27040 Information Technology – Security Techniques – Storage Security;
• National Institute of Standards and Technology (NIST) Framework; and
• Control Objectives for Information and Related Technologies (COBIT)

Related Topics to CIR Relationship to International Standards

Do You Want to Continue BCM Training onsite or online?

Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.

Reference: Chapter 4 Standards 4.1 Synopsis to 4.3 Related Standards

Note: This version was the draft 2nd Edition being updated in 2023. The numeric in the square bracket [X-X] cross-refers to the actual chapter and section in the 1st Edition.