💼 Incident Recovery Plan Execution (RC.RP)

Description

Restoration activities are performed to ensure operational availability of systems and services affected by cybersecurity incidents.

Section	Sub Sections	Internal Rules	Policies	Flags
💼 RC.RP-01: The recovery portion of the incident response plan is executed once initiated from the incident response process			2
💼 RC.RP-02: Recovery actions are selected, scoped, prioritized, and performed			2
💼 RC.RP-03: The integrity of backups and other restoration assets is verified before using them for restoration			1
💼 RC.RP-04: Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
💼 RC.RP-05: The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed			2
💼 RC.RP-06: The end of incident recovery is declared based on criteria, and incident-related documentation is completed