NIST CSF 2.0 Category

RC.IM Incident Recovery Improvements

RC Recover | Improve resilience and recovery capability based on real outcomes.

Implementation Objective

Use recovery retrospectives to remove bottlenecks and strengthen future resilience and restoration performance.

Implementation Actions

  • Assess recovery bottlenecks.
  • Update architecture and runbooks.
  • Validate improvements in future exercises.

Evidence Examples

  • Recovery retrospective
  • Resilience backlog
  • Exercise validation records

Suggested Metrics

  • Recovery objective attainment trend
  • Recurring bottleneck reduction