Redundancy of information processing facilities

frameworkISO/IEC 27001:2022 sectionA.8 Technological controls csf 2.0PR.IR-03 topicsBusiness Continuity, Disaster Recovery frameworks5 5 2

Official text · not licensableTitle: Redundancy of information processing facilities. The control text is ISO's copyright; see ISO/IEC 27001:2022.

gap from ISO 27001 → gap to ISO 27001 →

Wrong or missing mapping? Report it

Equivalents of A.8.14 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	GV.OC-04 PR.IR-03 RC.RP-02 RC.RP-04 RC.RP-05	Critical objectives, capabilities, and services that external stakeholders depend on or expect from the organization are understood and communicated; Mechanisms are implemented to achieve resilience requirements in normal and adverse situations…	Crosswalk	Same topic: Business Continuity, Disaster Recovery
CIS v8.1	CIS 11.1	Establish and Maintain a Data Recovery Process	Editorial	Same topic: Disaster Recovery (editorial pick)
SOC 2	A1.1 A1.2 A1.3 CC9.1	Capacity management to meet availability commitments; Environmental protections, backups and recovery infrastructure…	Editorial	Same topic: Business Continuity, Disaster Recovery (editorial pick)
PCI DSS	12.10.1	Incident response plan ready to activate	Crosswalk	Same topic: Business Continuity, Disaster Recovery 2 loosely related (not mappings) 12.10.2 Incident response plan reviewed and tested annually Loosely related Only shares CSF PR.IR-03: related, not a mapping 12.10.6 Plan updated from lessons learned and industry changes Loosely related Only shares CSF PR.IR-03: related, not a mapping
CMMC	SC.L2-3.13.2	Security Engineering	Loosely related	No mapping. Only shares CSF PR.IR-03: related, not a mapping
800-53	CP-2(8)CP-10 CP-7 CP-2 CP-6	Identify Critical Assets; System Recovery and Reconstitution…	Crosswalk	Same topic: Business Continuity, Disaster Recovery NIST SP 800-53 → ISO 27001 mapping 7 loosely related (not mappings) SA-8 Security and Privacy Engineering Principles Loosely related Only shares CSF PR.IR-03: related, not a mapping SA-24 Design For Cyber Resiliency Loosely related Only shares CSF PR.IR-03: related, not a mapping SC-6 Resource Availability Loosely related Only shares CSF PR.IR-03: related, not a mapping SC-24 Fail in Known State Loosely related Only shares CSF PR.IR-03: related, not a mapping SC-36 Distributed Processing and Storage Loosely related Only shares CSF PR.IR-03: related, not a mapping SC-39 Process Isolation Loosely related Only shares CSF PR.IR-03: related, not a mapping SI-13 Predictable Failure Prevention Loosely related Only shares CSF PR.IR-03: related, not a mapping
HIPAA	§164.308(a)(7)(ii)(B)§164.308(a)(7)(ii)(C)§164.308(a)(7)(ii)(D)	Disaster Recovery Plan; Emergency Mode Operation Plan…	Crosswalk	Same topic: Disaster Recovery, Business Continuity
GDPR	Art.32(1)(b)Art.32(1)(c)	Security of processing; Security of processing	Editorial	Same topic: Business Continuity, Disaster Recovery (editorial pick)
NIS2	4.1 4.2 4.3	Business continuity and disaster recovery plan; Backup management…	Crosswalk	Same topic: Business Continuity, Disaster Recovery
Essential Eight	ISM-1515	Restoration of data, applications and settings from backups to a common point in time…	Editorial	Same topic: Disaster Recovery (editorial pick)
DORA	Art.11(1)Art.11(4)Art.11(6)Art.12(4)	Response and recovery; Response and recovery…	Editorial	Same topic: Business Continuity, Disaster Recovery (editorial pick)
CPS 234	—	No requirement	No mapping in our data	No mapping in our data (CPS 234 is principles-based and its links are editorial).
Cyber Essentials	—	No requirement	No mapping in our data	No mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.