+RC RECOVER
---+RC.CO Incident Recovery Communication
------+RC.CO-01 Public relations are managed
------+RC.CO-02 Reputation is repaired after an incident
------+RC.CO-03 Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders
------+RC.CO-04 Public updates on incident recovery are shared using approved methods and messaging
---+RC.IM Improvements
------+RC.IM-01 Recovery plans incorporate lessons learned
------+RC.IM-02 Recovery strategies are updated
---+RC.RP Incident Recovery Plan Execution
------+RC.RP-01 The recovery portion of the incident response plan is executed once initiated from the incident response process
------+RC.RP-02 Recovery actions are selected, scoped, prioritized, and performed
------+RC.RP-03 The integrity of backups and other restoration assets is verified before using them for restoration
------+RC.RP-04 Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
------+RC.RP-05 The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed
------+RC.RP-06 The end of incident recovery is declared based on criteria, and incident-related documentation is completed
|
RC RECOVER
RECOVERAssets and operations affected by a cybersecurity incident are restored
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|