Sharing Indicator : White 3 3-1 Objective Essential Cybersecurity Controls Cybersecurity Resilience Cybersecurity Resilience Aspects of Business Continuity Management (BCM) To ensure the inclusion of the cybersecurity resiliency requirements within the organization’s business continuity management and to remediate and minimize the impacts on systems, information processing facilities and critical e-services from disasters caused by cybersecurity incidents. Controls 3-1-1 3-1-2 Cybersecurity requirements for business continuity management must be defined, documented and approved. The cybersecurity requirements for business continuity management must be implemented. The cybersecurity requirements for business continuity management must include at least the following: 3-1-3 3-1-3-1 Ensuring the continuity of cybersecurity systems and procedures. 3-1-3-2 Developing response plans for cybersecurity incidents that may affect the business continuity. 3-1-3-3 Developing disaster recovery plans. 3-1-4 26 The cybersecurity requirements for business continuity management must be reviewed periodically. Document Classification: Unclassified