Annex 3: Characteristics of Cyberattack Risks and Matters to Be Considered in the Treatment and Countermeasures that Are Associated with
Incident Readiness
peripheral systems in addition to the system that had suffered damage.
For response in an environment where systems with a low level of versatility are present,
take the following restrictions into consideration: restrictions on the measures that can
be taken on the systems in that environment (such as the inability to apply patches due
to concerns for the adverse impact on system operations); restrictions on the equipment
and networks that can be used in the response (such as difficulties in connecting the
investigation equipment or analyzing communications due to special communications
specifications); restrictions on the personnel who can be involved (such as the need for
personnel who understand the unique system specifications).
(Countermeasures during normal times, in preparation for the activation of CP and BCP)
Consider the necessary countermeasures, such as monitoring, after recognizing the
possibility that damage caused by a cyberattack can be incurred even in a closed
environment or systems with a low level of versatility.
40