+KSI-RPL Recovery Planning
---+KSI-RPL-ABO Aligning Backups with Objectives
---+KSI-RPL-ARP Aligning Recovery Plan
---+KSI-RPL-RRO Reviewing Recovery Objectives
---+KSI-RPL-TRC Testing Recovery Capabilities

KSI-RPL Recovery Planning

1. Přehled

Název	Standard
KSI-RPL-ABO Aligning Backups with Objectives	The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed. NIST SP 800-53 Rev. 5 controls: CM-2(3), CP-6, CP-9, CP-10, CP-10(2) Defined terms: Information Resource, Machine-Based (Information Resources), Persistently
KSI-RPL-ARP Aligning Recovery Plan	The alignment of recovery plans with defined recovery objectives is persistently reviewed. NIST SP 800-53 Rev. 5 controls: CP-2, CP-2(1), CP-2(3), CP-4(1), CP-6, CP-6(1), CP-6(3), CP-7, CP-7(1), CP-7(2), CP-7(3), CP-8, CP-8(1), CP-8(2), CP-10, CP-10(2) Defined terms: Persistently
KSI-RPL-RRO Reviewing Recovery Objectives	The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities. NIST SP 800-53 Rev. 5 controls: CP-2(3), CP-10 Defined terms: Persistently
KSI-RPL-TRC Testing Recovery Capabilities	The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested. NIST SP 800-53 Rev. 5 controls: CP-10, CP-2(1), CP-2(3), CP-4, CP-4(1), CP-6, CP-6(1), CP-9(1), IR-3, IR-3(2), IR-9(3), SC-12(1) Defined terms: Incident, Persistently

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky
Zdroj	Požadavek

3. Související regulace

Regulace
Zdroj	Regulace

FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.