NIST CSF 2.0 Category

RC.RP Incident Recovery Plan Execution

RC Recover | Restore systems and services against recovery objectives.

Implementation Objective

Restore critical services safely within defined recovery objectives and validate secure operational readiness.

Implementation Actions

  • Maintain service-specific recovery runbooks.
  • Execute staged restoration workflow.
  • Validate security and functionality post-restore.

Evidence Examples

  • Recovery plans
  • Restore execution logs
  • Post-restore validation

Suggested Metrics

  • Recovery time versus target
  • Successful service restoration rate