Class IncidentResponseRules

java.lang.Object

com.cloudforgeci.api.core.rules.IncidentResponseRules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="IncidentResponse",
                     priority=0,
                     alwaysLoad=true,
                     displayName="Incident Response & DR",
                     description="Cross-framework incident response and disaster recovery validation")
public class IncidentResponseRules
extends Object
implements FrameworkRules<SystemContext>

Incident response and disaster recovery compliance validation rules.

These rules enforce incident response and business continuity requirements across multiple compliance frameworks:

• PCI-DSS - Req 12.10: Incident response plan
• HIPAA - §164.308(a)(6): Security incident procedures
• SOC 2 - A1.2, A1.3: Business continuity and disaster recovery
• GDPR - Art.33: Breach notification within 72 hours

Controls Implemented

• Incident response plan documentation
• Disaster recovery plan and testing
• Backup and restore procedures
• Forensic logging and evidence preservation
• Business continuity procedures

Usage

// Automatically loaded via FrameworkLoader (v2.0 pattern)
// Or manually: new IncidentResponseRules().install(ctx);

Since:

3.0.0

Constructor Summary

Constructors

Constructor	Description
IncidentResponseRules()

Method Summary

Modifier and Type	Method	Description
Set<String>	claimedControls()	Controls checked across every validate* method above -- see FrameworkRules.claimedControls().
void	install(SystemContext ctx)	Install incident response validation rules.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface FrameworkRules

alwaysLoad, description, displayName, frameworkId, getRequiredConfiguration, priority

Constructor Details

IncidentResponseRules

public IncidentResponseRules()

Method Details

install

public void install(SystemContext ctx)

Install incident response validation rules. These rules apply primarily to PRODUCTION and STAGING environments.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - System context

claimedControls

public Set<String> claimedControls()

Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). Most of this class's checks (incident response plan/team/testing, RTO/RPO, business continuity, backup-restore testing, centralized log aggregation, automated log review) read a self-declared context flag rather than a SecurityProfileConfiguration accessor, so they are organizational/process checks rather than enforceable infrastructure controls and are not claimed here.

Specified by:

claimedControls in interface FrameworkRules<SystemContext>

Returns:

the control identifiers this framework's install() validates; empty if undeclared