nis2-impl

Annex 4.1.1

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (4)

Techniques referencing this article

  • DE-0002Disrupt or Deceive DownlinkST0006
    addresses
    moderate
    derived

    Business-continuity-and-disaster-recovery obligations cover the loss of operator visibility into spacecraft health; recovery plans for telemetry-pipeline outage are part of the entity's continuity discipline.

  • IMP-0002DisruptionST0009
    addresses
    high
    derived

    Disruption is precisely the temporary impairment business-continuity-and-disaster-recovery plans are established to manage; the implementing regulation requires the entity to lay down and maintain such plans for exactly this class of mission-affecting events.

  • IMP-0003DenialST0009
    addresses
    high
    direct

    Denial events (resource exhaustion, subsystem degradation, communications blocking) are exactly the class of temporary access loss that business-continuity-and-disaster-recovery plans must address per the implementing regulation.

  • IMP-0004DegradationST0009
    addresses
    moderate
    derived

    Business-continuity-and-disaster-recovery plans address sustained mission-life impacts; degradation events that shorten useful life trigger the same continuity-planning obligations.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.