3-1-1—3-1-1
>Control Description
Define, document, approve, and implement cybersecurity resiliency requirements for maintaining the confidentiality, integrity and availability of IoT devices and associated components, as part of the business continuity management plan of the organization, and review them periodically. As well as implementing the following:
▪ Develop resiliency requirements in consideration of how the disruption of an IoT device's essential functions, due to a cyberattack, could impact the business operations associated with it.
▪ Implement necessary resilience measures that are proportionate to the intended usage of the device, while considering other components that are associated with the IoT system, service or device.
▪ Ensure essential cybersecurity functions of IoT devices and services are capable of functioning locally in case of a network or power outage and can return to a desired state after the outage.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.