RC.RP-06 The end of incident recovery is declared based on criteria, and incident-related documentation is completed

Statement

The end of incident recovery is declared based on criteria, and incident-related documentation is completed

Guidance

Prepare an after-action report that documents the incident itself, the response and recovery actions taken, and lessons learned

Guidance

Declare the end of incident recovery once the criteria are met

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final