+RC RECOVER
---+RC.CO Incident Recovery Communication
------+RC.CO-01 Public relations are managed
------+RC.CO-02 Reputation is repaired after an incident
------+RC.CO-03 Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders
------+RC.CO-04 Public updates on incident recovery are shared using approved methods and messaging
---+RC.IM Improvements
------+RC.IM-01 Recovery plans incorporate lessons learned
------+RC.IM-02 Recovery strategies are updated
---+RC.RP Incident Recovery Plan Execution
------+RC.RP-01 The recovery portion of the incident response plan is executed once initiated from the incident response process
------+RC.RP-02 Recovery actions are selected, scoped, prioritized, and performed
------+RC.RP-03 The integrity of backups and other restoration assets is verified before using them for restoration
------+RC.RP-04 Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
------+RC.RP-05 The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed
------+RC.RP-06 The end of incident recovery is declared based on criteria, and incident-related documentation is completed
|
RC RECOVER
RECOVERAssets and operations affected by a cybersecurity incident are restored
1. Pregled
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
3. Povezani propisi
Povezani zadaci
|