Definitions

It is important to understand that there is no fixed definition of a cyber crisis. Each organization will define what for it is a crisis, in general it takes a strong impact on production to put itself in a crisis situation.

Several standards related to crisis and security incident management:

• NIST SP 800-34 : crisis management

• ISO 27035 : security incident management

• ISO 22301 : business continuity management system