PR.IP-9: Information Protection Processes and Procedures
Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed.
PR.IP-8: Information Protection Processes and Procedures
Effectiveness of protection technologies is shared and analyzed.
PR.IP-7: Information Protection Processes and Procedures
Protection processes are improved.
PR.IP-6: Information Protection Processes and Procedures
Data is destroyed according to policy.
PR.IP-5: Information Protection Processes and Procedures
Policy and regulations regarding the physical operating environment for organizational assets are met.
PR.IP-4: Information Protection Processes and Procedures
Backups of information are conducted, maintained, and tested periodically.
PR.IP-3: Information Protection Processes and Procedures
Configuration change control processes are in place.
PR.IP-2: Information Protection Processes and Procedures
A System Development Life Cycle to manage systems is implemented.
PR.IP-1: Information Protection Processes and Procedures
A baseline configuration of information technology/industrial control systems is created and maintained.