Technology Infrastructure Resilience (PR.IR)_technology-infrastructure-resilience

Technology Infrastructure Resilience (PR.IR) Technology Infrastructure Resilience

High-Level Description

Function: PROTECT (PR) Framework: NIST Cybersecurity Framework v2.0

Security architectures are managed with the organization's risk strategy to protect asset confidentiality, integrity, and availability, and organizational resilience

What to Check

• Verify Technology Infrastructure Resilience (PR.IR) Technology Infrastructure Resilience outcome is achieved
• Review documentation and evidence for Technology Infrastructure Resilience (PR.IR)
• Assess organizational maturity for PROTECT function

How to Test

Step 1: Identify Current Profile

Determine the organization's current and target CSF profile tier for Technology Infrastructure Resilience (PR.IR).

Step 2: Assess Outcome Achievement

# Review organizational policies and procedures
# Check for evidence that Technology Infrastructure Resilience (PR.IR) outcome is met
# Interview stakeholders responsible for PROTECT

Step 3: Map to Technical Controls

Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.

Tools

Remediation Guide

Achieve the Technology Infrastructure Resilience (PR.IR) Technology Infrastructure Resilience outcome:

Security architectures are managed with the organization's risk strategy to protect asset confidentiality, integrity, and availability, and organizational resilience

Risk Assessment

CWE Categories

References

• NIST CSF v2.0
• NIST CSF v2.0 Reference Tool
• CSF 2.0 Quick Start Guides

Checklist

• Current profile tier assessed
• Target profile tier defined
• Gap analysis completed
• SP 800-53 control mapping verified
• Implementation roadmap exists