Implementation Objective
Maintain recovery confidence through clear status communication, milestone tracking, and residual risk transparency.
NIST CSF 2.0 Category
RC.CO Incident Recovery Communication
RC Recover | Communicate recovery progress, status, and residual risk.
Implementation Actions
- Define update cadence during recovery.
- Provide milestone-based status reports.
- Track stakeholder acknowledgement for major events.
Evidence Examples
- Recovery communication plan
- Status updates
- Stakeholder acknowledgements
Suggested Metrics
- Status update timeliness
- Communication gap count
Framework Crosswalk
Direct mappings for this CSF category into NIST SP 800-171 family sections and CIS Controls v8 implementation domains.