💼 RC.RP-06: The end of incident recovery is declared based on criteria, and incident-related documentation is completed
- Contextual name: 💼 RC.RP-06: The end of incident recovery is declared based on criteria, and incident-related documentation is completed
- ID:
/frameworks/nist-csf-v2.0/rc-rp/06 - Located in: 💼 Incident Recovery Plan Execution (RC.RP)
Description
- Prepare an after-action report that documents the incident itself, the response and recovery actions taken, and lessons learned
- Declare the end of incident recovery once the criteria are met
Similar
- Sections
/frameworks/nist-sp-800-53-r5/ir/04/frameworks/nist-sp-800-53-r5/ir/08
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 IR-4 Incident Handling | 15 | |||
| 💼 NIST SP 800-53 Revision 5 → 💼 IR-8 Incident Response Plan | 1 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|