800-53 · SC System and Communications Protection
SC-24
Fail in Known State
frameworkNIST SP 800-53 Rev 5.2
sectionSC System and Communications Protection
csf 2.0PR.DS-10 PR.IR-03
topics—
frameworks0 0 1
Official textFail to a [Assignment: organization-defined known system state] for the following failures on the indicated components while preserving [Assignment: organization-defined system state information] in failure: [Assignment: organization-defined types of system failures on system components].NIST SP 800-53 Rev 5.2 control statement (public domain)
Wrong or missing mapping? Report it
| Framework | Requirement | Title | Link | Source / reason |
|---|---|---|---|---|
| NIST CSF 2.0 | PR.DS-10PR.IR-03 | The confidentiality, integrity, and availability of data-in-use are protected; Mechanisms are implemented to achieve resilience requirements in normal and adverse situations | No mapping. Only shares CSF PR.DS-10, PR.IR-03: related, not a mapping | |
| ISO 27001 | A.8.17Clause 4.2A.5.3A.5.10 | Clock synchronization; Understanding the needs and expectations of interested parties… | No mapping. Only shares CSF PR.DS-10, PR.IR-03: related, not a mapping+17 more loosely related (not mappings)A.5.23 Information security for use of cloud services Only shares CSF PR.DS-10: related, not a mapping …and 13 more in the downloads | |
| CIS v8.1 | CIS 3.1CIS 3.4CIS 3.5CIS 3.12 | Establish and Maintain a Data Management Process; Enforce Data Retention… | No mapping. Only shares CSF PR.DS-10: related, not a mapping | |
| SOC 2 | A1.1A1.2A1.3C1.2 | Capacity management to meet availability commitments; Environmental protections, backups and recovery infrastructure… | No mapping. Only shares CSF PR.IR-03, PR.DS-10: related, not a mapping | |
| PCI DSS | 3.2.13.4.17.2.28.2.8 | Account data storage minimised, with retention and disposal; PAN masked when displayed… | No mapping. Only shares CSF PR.DS-10: related, not a mapping+4 more loosely related (not mappings)12.10.2 Incident response plan reviewed and tested annually Only shares CSF PR.IR-03: related, not a mapping 12.10.6 Plan updated from lessons learned and industry changes Only shares CSF PR.IR-03: related, not a mapping 3.4.2 PAN copying prevented over remote-access technologies Only shares CSF PR.DS-10: related, not a mapping | |
| CMMC | SC.L2-3.13.2AC.L2-3.1.1AC.L2-3.1.2AC.L2-3.1.3 | Security Engineering; Authorized Access Control… | No mapping. Only shares CSF PR.DS-10, PR.IR-03: related, not a mapping+15 more loosely related (not mappings)…and 11 more in the downloads | |
| HIPAA | §164.308(a)(1)(ii)(D)§164.308(a)(3)§164.308(a)(3)(ii)(A)§164.308(a)(3)(ii)(B) | Information System Activity Review; Workforce Security… | No mapping. Only shares CSF PR.DS-10: related, not a mapping+21 more loosely related (not mappings)§164.308(a)(4)(ii)(A) Isolating Health care Clearinghouse Function Only shares CSF PR.DS-10: related, not a mapping §164.308(a)(4)(ii)(C) Access Establishment and Modification Only shares CSF PR.DS-10: related, not a mapping …and 17 more in the downloads | |
| GDPR | Art.32(1)(b)Art.5(1)(e)Art.5(1)(f)Art.32(1)(c) | Security of processing; Principles relating to processing of personal data… | No mapping. Only shares CSF PR.DS-10, PR.IR-03: related, not a mapping | |
| NIS2 | 4.3 | Crisis management | No mapping. Only shares CSF PR.IR-03: related, not a mapping | |
| Essential Eight | ISM-1515 | Restoration of data, applications and settings from backups to a common point in time… | No mapping. Only shares CSF PR.IR-03: related, not a mapping | |
| DORA | Art.9(2)Art.9(3)(c)Art.9(3)(d)Art.11(1) | Protection and prevention; Protection and prevention… | No mapping. Only shares CSF PR.DS-10, PR.IR-03: related, not a mapping+3 more loosely related (not mappings)Art.12(4) Backup policies and procedures, restoration and recovery procedures and methods Only shares CSF PR.IR-03: related, not a mapping | |
| CPS 234 | Para 21 | Timely controls commensurate with risk and asset life-cycle | No mapping. Only shares CSF PR.DS-10: related, not a mapping | |
| Cyber Essentials | — | No requirement | No mapping in our data | No mapping in our data (Cyber Essentials covers five technical controls only). |
Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.