Category:Information Protection Processes and Procedures (PR.IP)

P

• PR.IP-10: Response and recovery plans are tested‎ (1 P)
• PR.IP-11: Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)‎ (1 P)
• PR.IP-12: A vulnerability management plan is developed and implemented‎ (1 P)
• PR.IP-1: A baseline configuration of information technology or industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)‎ (1 P)
• PR.IP-2: A System Development Life Cycle to manage systems is implemented‎ (1 P)
• PR.IP-3: Configuration change control processes are in place‎ (1 P)
• PR.IP-4: Backups of information are conducted, maintained, and tested‎ (1 P)
• PR.IP-5: Policy and regulations regarding the physical operating environment for organizational assets are met‎ (1 P)
• PR.IP-6: Data is destroyed according to policy‎ (1 P)
• PR.IP-7: Protection processes are improved‎ (1 P)
• PR.IP-8: Effectiveness of protection technologies is shared‎ (1 P)
• PR.IP-9: Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed‎ (1 P)