PR.IP-12: Information Protection Processes and Procedures
A vulnerability management plan is developed and implemented.
PR.IP-11: Information Protection Processes and Procedures
Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening).
PR.IP-10: Information Protection Processes and Procedures
Response and recovery plans are tested.
PR.IP-9: Information Protection Processes and Procedures
Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed.
PR.IP-8: Information Protection Processes and Procedures
Effectiveness of protection technologies is shared and analyzed.