Incident Recovery
What is Incident Recovery?
The phase of incident response where affected systems are restored to normal operations and verified to be free of threats.
Frameworks that govern incident recovery
What the standards actually require on incident recovery
Requirements naming incident recovery across 3 standards, quoted from the control text.
NIST Cybersecurity Framework 2.02 controls
Public updates on incident recovery are shared using approved methods and messaging
NIST-CSF-RC.CO-04 · Public updates on incident recovery are shared using approved methods and messaging →The operator and Customs develop and document contingency plans for emergency security situations and for disaster or incident recovery, with periodic training of employees so the plans can be executed.
AEO-12 · Crisis Management and Incident Recovery →The entity identifies, develops, and implements activities to recover from identified security incidents.
SSAE18-CC7.5 · CC7.5 - Incident Recovery →Questions people ask about incident recovery
What is Incident Recovery?
The phase of incident response where affected systems are restored to normal operations and verified to be free of threats.
Why is Incident Recovery important for compliance?
Incident Recovery is a key concept in Information Security. Understanding incident recovery helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Incident Recovery?
Incident Recovery appears in the requirement text of NIST Cybersecurity Framework 2.0, Authorised Economic Operator (AEO) Programmes - Global Standards, SSAE 18 - Attestation Standards (SOC Reporting). Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Incident Recovery?
Explore our compliance framework pages to see how incident recovery applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.
See how Incident Recovery applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.
Written and maintained by Gerard Blokdyk, The Art of Service.