Assessment Evaluation Domains
These domains act as the primary control areas used to assess the organisation’s ability to understand, protect, monitor, respond to and recover critical business services and data.
Identify: Establishes an understanding of critical systems, data, recovery priorities and business requirements
Protect: Evaluates the controls used to protect data and maintain recovery capability
Detect: Assesses the ability to identify failures, risks and resilience-related events in a timely manner
Respond: Measures preparedness to manage and coordinate recovery activities during disruption events
Recover: Assesses the ability to restore services and validate recovery objectives following disruption