Skip to main content

💼 RC.RP-06: The end of incident recovery is declared based on criteria, and incident-related documentation is completed

  • ID: /frameworks/nist-csf-v2.0/rc-rp/06

Description​

  1. Prepare an after-action report that documents the incident itself, the response and recovery actions taken, and lessons learned
  2. Declare the end of incident recovery once the criteria are met

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/ir/04
    • /frameworks/nist-sp-800-53-r5/ir/08

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST SP 800-53 Revision 5 → 💼 IR-4 Incident Handling151no data
💼 NIST SP 800-53 Revision 5 → 💼 IR-8 Incident Response Plan1no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance