[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso\u002F22301":3},{"item":4,"lessons":16,"controls":38,"related":61},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso","22301","ISO\u002FIEC 22301","ISO 22301: Security and resilience: Business continuity management systems: Requirements",5,"International Organization for Standardization (ISO) and IEC","**What it covers.** An international standard specifying requirements for a business continuity management system. It helps organisations prepare for, respond to and recover from disruptive incidents, using the same management system structure as ISO\u002FIEC 27001.\n\n**In practice.** Applying it well means performing a business impact analysis and risk assessment, setting priorities and recovery objectives, developing continuity strategies and plans, and exercising them regularly. Leadership is involved and results feed improvement. Evidence includes the impact analysis, plans, exercise reports and management review records. It supports operational resilience expectations such as those in DORA and NIS2.\n\n**Common gaps.** Common gaps are plans that do not reflect dependencies on IT and suppliers, exercises limited to desk reviews and objectives that were never validated.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F75106.html","See the standard at ISO","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34],{"slug":19,"title":20,"published_at":21},"drone-strikes-on-yandex-data-centers-highlight-physical-resilience-gaps","Drone Strikes on Yandex Data Centers Highlight Physical Resilience Gaps","2026-10-12T20:20:18.165+00:00",{"slug":23,"title":24,"published_at":25},"ransomware-true-cost-why-bcdr-is-non-negotiable","Ransomware True Cost: Why BCDR Is Non-Negotiable","2026-09-16T16:21:08.719+00:00",{"slug":27,"title":28,"published_at":29},"exchange-online-outage-highlights-cloud-dependency-risks","Exchange Online Outage Highlights Cloud Dependency Risks","2026-08-31T18:20:54.35+00:00",{"slug":31,"title":32,"published_at":33},"cyberattack-halts-boston-scientific-global-operations","Cyberattack Halts Boston Scientific Global Operations","2026-08-26T16:20:35.393+00:00",{"slug":35,"title":36,"published_at":37},"chatgpt-global-outage-exposes-critical-service-availability-risks","ChatGPT Global Outage Exposes Critical Service Availability Risks","2026-08-20T02:20:22.161+00:00",[39,44,48,53,57],{"slug":40,"name":41,"problem":42,"stories":43},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",3,{"slug":45,"name":46,"problem":47,"stories":43},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",{"slug":49,"name":50,"problem":51,"stories":52},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",1,{"slug":54,"name":55,"problem":56,"stories":52},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":58,"name":59,"problem":60,"stories":52},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[62,67,71,77,82,88,92,96],{"family":63,"item":64,"code":65,"title":66,"together":9},"cis","11","Control 11","Data Recovery",{"family":68,"item":69,"code":70,"title":70,"together":9},"itil","overview","ITIL",{"family":72,"item":73,"code":74,"title":75,"together":76},"nist-800-53","ir-4","IR-4","Incident Handling",4,{"family":78,"item":79,"code":80,"title":81,"together":76},"nist-sp","800-34","SP 800-34","SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems",{"family":83,"item":84,"code":85,"title":86,"together":87},"gdpr","32","Article 32","Security of processing",2,{"family":72,"item":89,"code":90,"title":91,"together":87},"si-7","SI-7","Software, Firmware, and Information Integrity",{"family":63,"item":93,"code":94,"title":95,"together":87},"17","Control 17","Incident Response Management",{"family":72,"item":97,"code":98,"title":99,"together":87},"cp-2","CP-2","Contingency Plan"]