Identify
2.2.2 Business environment
The business’s objectives, tasks and activities are rated and prioritised. This information
is used as a basis for allocating responsibilities.
Description
Task
ID.BE-1
Identify, document and communicate the exact role of your business within the (critical)
supply chain.
ID.BE-2
The importance of the organisation as a critical infrastructure operator, and its position within
the critical sector, is identified and communicated.
ID.BE-3
Objectives, tasks and activities within the organisation are prioritised and rated.
ID.BE-4
(ITIRHIRGMIWERHGVMXMGEPJYRGXMSRWJSVHIPMZIV]SJGVMXMGEPWIVZMGIWEVIIWXEFPMWLIH
ID.BE-5
6IWMPMIRGIVIUYMVIQIRXWXSWYTTSVXHIPMZIV]SJGVMXMGEPWIVZMGIWEVIIWXEFPMWLIHJSVEPP
STIVEXMRKWXEXIW IKYRHIVHYVIWWEXXEGOHYVMRKVIGSZIV]RSVQEPSTIVEXMSRW
Table 5: ID.BE tasks
Standard
Reference
CCS CSC 1
1, 2
COBIT 5
BAI09.01, BAI09.02, BAI09.05, DSS05.02, APO02.02, APO03.03, APO03.04, PO01.02, DSS06.03
ISA 62443-3:2013
SR 7.8
ISO 27001:2013
A.6.1.1, A.8.1.1, A.8.1.2, A.8.2.1, A.11.2.6
NIST-SP-800-53 Rev. 4
AC-4, CA-3, CA-9, PL-8, CM-8, AC-20, SA-9, CP-2, RA-2, SA-14, CP-2, PS-7, PM-11
BSI 100-2
B 1.11, M 2.256, B 2.2, B 2.12, M 2.214
Table 6: ID.BE references
Minimum ICT standard 2018
16
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents