unified
UC-BCDR-01 — Maintain business continuity and disaster recovery plans
Maintain documented, management-approved business continuity and disaster recovery plans that cover critical business functions and ICT services, recovery time and recovery point objectives, assigned roles, and how information security is preserved at required levels during disruption. Base the plans on a business impact analysis, distribute them to responsible personnel, and review and update them at least annually and after significant organizational or technology changes.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Business Continuity & Disaster Recovery
- type
- corrective
- category
- administrative
Details
- unified_id
- UC-BCDR-01
- title
- Maintain business continuity and disaster recovery plans
- statement
- Maintain documented, management-approved business continuity and disaster recovery plans that cover critical business functions and ICT services, recovery time and recovery point objectives, assigned roles, and how information security is preserved at required levels during disruption. Base the plans on a business impact analysis, distribute them to responsible personnel, and review and update them at least annually and after significant organizational or technology changes.
- domain
- Business Continuity & Disaster Recovery
- control_type
- corrective
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- CP-2
- coverage
- full
- relationship
- superset_of
- framework
- cobit-2019
- control_id
- DSS04
- coverage
- partial
- delta
- continuity testing, training, and post-incident review satisfied by companion controls
- relationship
- intersects_with
- framework
- iso-27001
- control_id
- A.5.29
- coverage
- full
- relationship
- superset_of
- framework
- iso-27001
- control_id
- A.5.30
- coverage
- partial
- delta
- periodic ICT readiness testing satisfied by the testing control
- relationship
- intersects_with
- framework
- nydfs-500
- control_id
- 500.16
- coverage
- partial
- delta
- plan testing, training, and backup restore verification satisfied by companion controls
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans mitigates Absent or untested business continuity / disaster recovery plan
- strength
- primary
- rationale
- maintaining a documented, approved, annually-reviewed BCP/DR plan directly cures the absent-plan condition
- ISO 27001 Stage 2 Annex A Controls Audit tests UC-BCDR-01 — Maintain business continuity and disaster recovery plans
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans maps_to CP-2 — Contingency Plan
- framework
- nist-800-53
- control_id
- CP-2
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans maps_to A.5.30 — ICT readiness for business continuity
- framework
- iso-27001
- control_id
- A.5.30
- coverage
- partial
- delta
- periodic ICT readiness testing satisfied by the testing control
- relationship
- intersects_with
- source_version
- 2022
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- the BIA-based plan identifies single points of failure and prescribes failover arrangements
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans mitigates Physical climate risk to facilities and supply chains
- strength
- related
- rationale
- the BIA-based continuity plan prepares alternate operations for climate-driven facility disruption
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans maps_to DSS04 — Managed Continuity
- framework
- cobit-2019
- control_id
- DSS04
- coverage
- partial
- delta
- continuity testing, training, and post-incident review satisfied by companion controls
- relationship
- intersects_with
- source_version
- 2019
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans maps_to 500.16 — Incident response and business continuity management
- framework
- nydfs-500
- control_id
- 500.16
- coverage
- partial
- delta
- plan testing, training, and backup restore verification satisfied by companion controls
- relationship
- intersects_with
- source_version
- 23 NYCRR 500, Second Amendment
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Business Continuity & DR Test Exercise operates UC-BCDR-01 — Maintain business continuity and disaster recovery plans
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans mitigates Loss of essential services (power, HVAC, telecoms)
- strength
- primary
- rationale
- the contingency plan provides alternate arrangements for loss of power/HVAC/telecoms
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans maps_to A.5.29 — Information security during disruption
- framework
- iso-27001
- control_id
- A.5.29
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2022
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans mitigates Physical damage to assets from disaster, terrorism or vandalism
- strength
- related
- rationale
- the plan provides continuity arrangements to recover after a facility-damaging disaster