Identify 2.2.2 Business environment The business’s objectives, tasks and activities are rated and prioritised. This information is used as a basis for allocating responsibilities. Description Task ID.BE-1 Identify, document and communicate the exact role of your business within the (critical) supply chain. ID.BE-2 The importance of the organisation as a critical infrastructure operator, and its position within the critical sector, is identified and communicated. ID.BE-3 Objectives, tasks and activities within the organisation are prioritised and rated. ID.BE-4 (ITIRHIRGMIWERHGVMXMGEPJYRGXMSRWJSVHIPMZIV]SJGVMXMGEPWIVZMGIWEVIIWXEFPMWLIH ID.BE-5 6IWMPMIRGIVIUYMVIQIRXWXSWYTTSVXHIPMZIV]SJGVMXMGEPWIVZMGIWEVIIWXEFPMWLIHJSVEPP STIVEXMRKWXEXIW IKYRHIVHYVIWWEXXEGOHYVMRKVIGSZIV]RSVQEPSTIVEXMSRW  Table 5: ID.BE tasks Standard Reference CCS CSC 1 1, 2 COBIT 5 BAI09.01, BAI09.02, BAI09.05, DSS05.02, APO02.02, APO03.03, APO03.04, PO01.02, DSS06.03 ISA 62443-3:2013 SR 7.8 ISO 27001:2013 A.6.1.1, A.8.1.1, A.8.1.2, A.8.2.1, A.11.2.6 NIST-SP-800-53 Rev. 4 AC-4, CA-3, CA-9, PL-8, CM-8, AC-20, SA-9, CP-2, RA-2, SA-14, CP-2, PS-7, PM-11 BSI 100-2 B 1.11, M 2.256, B 2.2, B 2.12, M 2.214 Table 6: ID.BE references Minimum ICT standard 2018 16

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents