+RC RECOVER
---+RC.CO Incident Recovery Communication
------+RC.CO-01 Public relations are managed
------+RC.CO-02 Reputation is repaired after an incident
------+RC.CO-03 Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders
------+RC.CO-04 Public updates on incident recovery are shared using approved methods and messaging
---+RC.IM Improvements
------+RC.IM-01 Recovery plans incorporate lessons learned
------+RC.IM-02 Recovery strategies are updated
---+RC.RP Incident Recovery Plan Execution
------+RC.RP-01 The recovery portion of the incident response plan is executed once initiated from the incident response process
------+RC.RP-02 Recovery actions are selected, scoped, prioritized, and performed
------+RC.RP-03 The integrity of backups and other restoration assets is verified before using them for restoration
------+RC.RP-04 Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
------+RC.RP-05 The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed
------+RC.RP-06 The end of incident recovery is declared based on criteria, and incident-related documentation is completed
|
RC RECOVER
RECOVERAssets and operations affected by a cybersecurity incident are restored
1. Pārskats
1.1 Atsauces
1.2 Identificētās prasības
1.3 Saistītie tiesību akti
2. Identificētās prasības
3. Saistītie tiesību akti
Tiesību akti
| Avots |
Regulējums |
Saistītie uzdevumi
|