+RC.CO Incident Recovery Communication
---+RC.CO-01 Public relations are managed
---+RC.CO-02 Reputation is repaired after an incident
---+RC.CO-03 Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders
---+RC.CO-04 Public updates on incident recovery are shared using approved methods and messaging

RC.CO Incident Recovery Communication

Statement

Restoration activities are coordinated with internal and external parties

1. Übersicht

Bezeichnung Standard
RC.CO-01 Public relations are managed

Statement

Public relations are managed

RC.CO-02 Reputation is repaired after an incident

Statement

Reputation is repaired after an incident

RC.CO-03 Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders

Statement

Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders

Guidance

Securely share recovery information, including restoration progress, consistent with response plans and information sharing agreements

Guidance

Regularly update senior leadership on recovery status and restoration progress for major incidents

Guidance

Follow the rules and protocols defined in contracts for incident information sharing between the organization and its suppliers

Guidance

Coordinate crisis communication between the organization and its critical suppliers

RC.CO-04 Public updates on incident recovery are shared using approved methods and messaging

Statement

Public updates on incident recovery are shared using approved methods and messaging

Guidance

Follow the organization's breach notification procedures for recovering from a data breach incident

Guidance

Explain the steps being taken to recover from the incident and to prevent a recurrence

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen
Quelle Anforderung

3. Zugehörige Regulierungen

Regulierungen
Quelle Regulierung

Verknüpfte Vorgänge

  • NIST -

    EN: Publications of the National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, from their electronic versions (OSCAL; SP 800-63-4 from its HTML version, https://pages.nist.gov/800-63-4/). Works of NIST employees are not subject to copyright protection in the United States (17 U.S.C. § 105); the OSCAL content is dedicated to the public domain worldwide (CC0 1.0); outside the United States NIST grants the right to reprint its technical series publications in all formats (NIST copyright statement). Republished courtesy of the National Institute of Standards and Technology; each document names its citation. Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by NIST are authoritative.

    DE: Veröffentlichungen des National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, aus ihren elektronischen Fassungen (OSCAL; SP 800-63-4 aus ihrer HTML-Fassung, https://pages.nist.gov/800-63-4/). Werke von NIST-Beschäftigten sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105); die OSCAL-Inhalte sind weltweit gemeinfrei gestellt (CC0 1.0); außerhalb der USA räumt das NIST das Recht ein, seine Technical-Series-Publikationen in allen Formaten neu zu veröffentlichen (Copyright-Hinweis des NIST). „Republished courtesy of the National Institute of Standards and Technology“; jedes Dokument nennt seine Zitierangabe. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die vom NIST veröffentlichten Fassungen.