PR.IP-4

Standard

Standard Version

NIST CSF

(v1.1)

Information Protection Processes and Procedures (PR.IP): Security policies (that address purpose, scope, roles, responsibilities, management commitment, and coordination among organizational entities), processes, and procedures are maintained and used to manage protection of information systems and assets.

Backups of information are conducted, maintained, and tested