Law / Frameworks / NIST CSF 2.0 / Identify
NIST CSF 2.0, IdentifyID.IM-03
Improvements are identified from execution of operational processes, procedures, and activitiesNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), ID.IM-03
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 3
- laws
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST Privacy FrameworkPR.PO-P5 Protection processes are improved., 2 laws
Sector security regimes
3 laws, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR) |
Run a continuous improvement process and document your key processes, procedures, roles and responsibilities (points IS.D.OR.200(b) and (c)). |
| European Union |
Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR) |
Run a continuous improvement process and document your key processes, procedures, roles and responsibilities (points IS.I.OR.200(b) and (c)). |
| European Union |
DORA, Articles 5-16 (ICT Risk Management Framework) |
Have capabilities and staff to gather information on vulnerabilities, cyber threats and ICT-related incidents, run post-incident reviews after a major ICT-related incident disrupts your core activities, build the lessons from testing and real incidents into the ICT risk assessment, have senior ICT staff report at least yearly to the management body, and make ICT security awareness programs and digital operational resilience training compulsory modules for all employees and senior management (Article 13). |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.