G.4.2 Contingency training

Control Details

Objective

Provide training on procedures in the event of a security emergency.

Definition

Conduct contingency training to prepare for emergency response, backup operations, and post-disaster recovery to ensure the availability of critical information resources in emergencies. Critical suppliers should also be included in the training.

Assessment Questions

  1. Describe your contingency training for preparing for emergency response, backup operations, and post-disaster recovery.

Reference sources

  1. BSIMM T1.1
  2. 800-161 CP-3 IR-2