Law / Frameworks / NIST Privacy Framework / Protect-P
NIST Privacy Framework, Protect-PPR.PT-P4
Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations.NIST Privacy Framework, version 1.0, January 2020, PR.PT-P4
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 6
- laws
- 5
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST CSF 2.0PR.IR-03 Mechanisms are implemented to achieve resilience requirements in normal and..., 6 laws
Sector security regimes
5 laws, 4 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Djibouti |
Digital Code, Book II: Electronic Communications Network and Service Security |
Take all appropriate measures to ensure the integrity of your network and the continuity of the services you supply, if you operate a public electronic communications network or provide a public electronic communications service in Djibouti. |
 Germany |
Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures |
If you operate a public telecommunications network or provide a publicly available telecommunications service, take appropriate technical and organisational measures against disruptions that significantly impair networks and services and to control the risks to their security, including encryption where appropriate and measures that secure systems against unauthorised access and limit the effects of security breaches (Section 165(2)). If you operate a public telecommunications network, take measures to keep it operating properly and its services continuously available (Section 165(5)). |
| Germany |
Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms |
Ensure the continuity and regularity of your investment services by relying on suitable and proportionate systems, including the ICT systems set up and managed under Article 7 of Regulation (EU) 2022/2554, and on suitable and proportionate resources and procedures (Section 80(1) sentence 2 number 1). |
 Hungary |
2007. évi CXXXVIII. törvény (Bszt.), ICT Resilience of Algorithmic Trading Systems |
If you are an investment firm engaged in algorithmic trading, keep effective systems and risk controls that ensure, in line with DORA Chapter II, that your trading systems are resilient with sufficient capacity, are subject to appropriate trading thresholds and limits, cannot send erroneous orders and cannot be used for market abuse (Bszt., Section 26/B(1)). |
 New York |
DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment |
The Department says you should consider reviewing or developing threat-relevant personnel, customer and third-party communication strategies sufficient to address prolonged system and service disruptions; if you use operational technologies, confirming that critical system functions can operate if other information systems are unavailable or compromised; and monitoring financial transactions, including virtual currency business activity, to ensure compliance with applicable orders and guidance on sanctions and anti-money laundering. |
Security baseline statutes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Indonesia |
Government Regulation on the Operation of Electronic Systems and Transactions, electronic-system security duty |
Secure your Electronic System's components, and have and run procedures and means to protect the system against disruption, failure, and loss. |
Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.