[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-5-29":3},{"item":4,"lessons":16,"controls":38,"related":66},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-5-29","Annex A 5.29","ISO\u002FIEC 27001:2022 Annex A 5.29: Information security during disruption",5,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects the organisation to plan how to maintain information security at an appropriate level during disruption. Its purpose is to protect information and other associated assets when normal operations are interrupted.\n\n**In practice.** Good practice means considering security within continuity and recovery planning, so that controls such as access control, logging and encryption still work when operating from backup sites, using workarounds or manual processes. Where security has to be relaxed, this is decided in advance with compensating measures. Auditors look for continuity plans that address security and exercise results showing it was tested.\n\n**Common gaps.** Common gaps are continuity plans that ignore security, emergency access with no logging and recovery environments that are less protected than production. Temporary arrangements made during disruption are also often not reversed afterwards.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26,30,34],{"slug":19,"title":20,"published_at":21},"shinyhunters-leaks-16m-ringcentral-accounts-after-ransom-refusal","ShinyHunters Leaks 1.6M RingCentral Accounts After Ransom Refusal","2026-08-14T12:21:33.932+00:00",{"slug":23,"title":24,"published_at":25},"insurance-broker-fined-200k-after-ransomware-exposes-40000-records-and-missing-dpia","Insurance Broker Fined €200K After Ransomware Exposes 40,000 Records and Missing DPIA","2026-07-16T10:20:22.513+00:00",{"slug":27,"title":28,"published_at":29},"spanish-insurer-fined-200k-after-ransomware-exposes-40000-records-and-dpia-failures","Spanish Insurer Fined €200K After Ransomware Exposes 40,000 Records and DPIA Failures","2026-07-08T10:21:46.082+00:00",{"slug":31,"title":32,"published_at":33},"200k-gdpr-fine-after-ransomware-exposes-40000-records-at-spanish-insurance-broker","€200K GDPR Fine After Ransomware Exposes 40,000 Records at Spanish Insurance Broker","2026-07-07T16:20:36.034+00:00",{"slug":35,"title":36,"published_at":37},"alkora-fined-200k-after-ransomware-exposes-40000-records-due-to-missing-dpia-and-weak-controls","Alkora Fined €200K After Ransomware Exposes 40,000 Records Due to Missing DPIA and Weak Controls","2026-07-03T12:21:18.936+00:00",[39,44,49,53,57,62],{"slug":40,"name":41,"problem":42,"stories":43},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",3,{"slug":45,"name":46,"problem":47,"stories":48},"patch-management","Automated patch management","Known holes get closed in days, not months.",2,{"slug":50,"name":51,"problem":52,"stories":48},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",{"slug":54,"name":55,"problem":56,"stories":48},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":58,"name":59,"problem":60,"stories":61},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",1,{"slug":63,"name":64,"problem":65,"stories":61},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[67,72,77,82,86,90,94,98],{"family":68,"item":69,"code":70,"title":71,"together":9},"gdpr","32","Article 32","Security of processing",{"family":5,"item":73,"code":74,"title":75,"together":76},"a-8-8","Annex A 8.8","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of technical vulnerabilities",4,{"family":78,"item":79,"code":80,"title":81,"together":76},"cis","17","Control 17","Incident Response Management",{"family":78,"item":83,"code":84,"title":85,"together":76},"3","Control 3","Data Protection",{"family":68,"item":87,"code":88,"title":89,"together":76},"33","Article 33","Notification of a personal data breach to the supervisory authority",{"family":68,"item":91,"code":92,"title":93,"together":76},"25","Article 25","Data protection by design and by default",{"family":68,"item":95,"code":96,"title":97,"together":76},"35","Article 35","Data protection impact assessment",{"family":78,"item":99,"code":100,"title":101,"together":43},"13","Control 13","Network Monitoring and Defense"]