[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-34":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-34","SP 800-34","SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems",26,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on planning for the disruption of information systems. It describes a contingency planning process that includes a business impact analysis, preventive controls, recovery strategies, plan development, testing and maintenance, and explains how system plans relate to wider continuity planning.\n\n**In practice.** Organisations perform a business impact analysis to set recovery time and recovery point objectives, select backup and recovery strategies to meet them, and write plans with clear roles and procedures. Plans are tested through tabletop and technical exercises and updated after changes. Evidence includes impact analyses, plans, test reports and corrective actions.\n\n**Common gaps.** Common gaps are plans that do not reflect current architecture or cloud dependencies, recovery objectives that were never tested, and no scenario for ransomware affecting backups.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F34\u002Fr1\u002Fupd1\u002Ffinal","Read the publication at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"bae-systems-breach-cripples-us-bankruptcy-court-noticing-system","BAE Systems Breach Cripples US Bankruptcy Court Noticing System","2026-10-16T16:20:16.497+00:00",{"slug":23,"title":24,"published_at":25},"bae-systems-breach-disrupts-federal-court-infrastructure-via-supply-chain-attack","BAE Systems Breach Disrupts Federal Court Infrastructure via Supply Chain Attack","2026-10-16T08:20:29.888+00:00",{"slug":27,"title":28,"published_at":29},"drone-strikes-on-yandex-data-centers-highlight-physical-resilience-gaps","Drone Strikes on Yandex Data Centers Highlight Physical Resilience Gaps","2026-10-12T20:20:18.165+00:00",{"slug":31,"title":32,"published_at":33},"unpatched-backup-platform-exploited-for-cryptomining-and-webshells","Unpatched Backup Platform Exploited for Cryptomining and Webshells","2026-10-09T18:20:23.376+00:00",{"slug":35,"title":36,"published_at":37},"ransomware-groups-now-target-backups-first-recovery-is-no-longer-guaranteed","Ransomware Groups Now Target Backups First — Recovery Is No Longer Guaranteed","2026-10-07T16:21:31.344+00:00",{"slug":39,"title":40,"published_at":41},"microsoft-september-update-breaks-windows-file-history-backup","Microsoft September Update Breaks Windows File History Backup","2026-09-21T12:20:37.982+00:00",{"slug":43,"title":44,"published_at":45},"ransomware-true-cost-why-bcdr-is-non-negotiable","Ransomware True Cost: Why BCDR Is Non-Negotiable","2026-09-16T16:21:08.719+00:00",{"slug":47,"title":48,"published_at":49},"msps-must-go-beyond-basic-backups-to-survive-ransomware","MSPs Must Go Beyond Basic Backups to Survive Ransomware","2026-09-02T16:22:27.372+00:00",{"slug":51,"title":52,"published_at":53},"exchange-online-outage-highlights-cloud-dependency-risks","Exchange Online Outage Highlights Cloud Dependency Risks","2026-08-31T18:20:54.35+00:00",{"slug":55,"title":56,"published_at":57},"cyberattack-halts-boston-scientific-global-operations","Cyberattack Halts Boston Scientific Global Operations","2026-08-26T16:20:35.393+00:00",{"slug":59,"title":60,"published_at":61},"medusa-ransomware-breaches-500-critical-infrastructure-orgs","Medusa Ransomware Breaches 500+ Critical Infrastructure Orgs","2026-08-19T10:21:32.363+00:00",{"slug":63,"title":64,"published_at":65},"cisa-urges-critical-infrastructure-to-plan-for-ot-isolation-during-cyberattacks","CISA Urges Critical Infrastructure to Plan for OT Isolation During Cyberattacks","2026-07-28T20:20:52.084+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",18,{"slug":73,"name":74,"problem":75,"stories":76},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",10,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",9,{"slug":83,"name":84,"problem":85,"stories":86},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",7,{"slug":88,"name":89,"problem":90,"stories":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",4,{"slug":93,"name":94,"problem":95,"stories":91},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[97,102,108,113,118,122,127,131],{"family":98,"item":99,"code":100,"title":100,"together":101},"itil","overview","ITIL",21,{"family":103,"item":104,"code":105,"title":106,"together":107},"cis","11","Control 11","Data Recovery",20,{"family":103,"item":109,"code":110,"title":111,"together":112},"17","Control 17","Incident Response Management",12,{"family":114,"item":115,"code":116,"title":117,"together":81},"gdpr","32","Article 32","Security of processing",{"family":5,"item":119,"code":120,"title":121,"together":81},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",{"family":103,"item":123,"code":124,"title":125,"together":126},"12","Control 12","Network Infrastructure Management",8,{"family":103,"item":128,"code":129,"title":130,"together":126},"13","Control 13","Network Monitoring and Defense",{"family":132,"item":133,"code":134,"title":135,"together":86},"nist-800-53","ir-4","IR-4","Incident Handling"]