Converged Security Framework - Incident Response and Business Continuity Procedure

Incident Response and Business Continuity Procedure. Board-approved procedure, v1.0. Not a peer-reviewed Journal article. This procedure tells an adopting organisation exactly who does what, when and how to implement GCSB-ST-CSF-IRBC-001. It converts the standard's requirements (clauses 6.1 to 6.6) into repeatable, auditable steps. It does not change, relax or extend any requirement of the standard; where this procedure and the standard differ, the standard prevails. Where the NIS2 Directive, DORA, the UK and EU GDPR or other sectoral rules impose stricter requirements, the stricter rule applies. Issued by Global Converged Security Board. The adopting organisation is responsible for implementation; publication does not itself confer accreditation or a credential.