Recovery Capability
What is Recovery Capability?
An organization's ability to restore operations within defined timeframes using available resources, plans, and procedures.
Terms that appear alongside recovery capability
Each of these is named in at least one of the same controls as recovery capability. The number is how many controls name both.
Frameworks that govern recovery capability
What the standards actually require on recovery capability
Requirements naming recovery capability across 6 standards, quoted from the control text.
Operate recovery capability aligned with FIPS 199 impact level + NIST RMF integration per NIST SP 800-34 Rev 1 Appendix F (Sample Plans per Impact Level) + Chapter 4 (Information System Contingency Plan Development).
NISTSP34-8 · Recovery Capability by Impact Level, RTO/RPO, and Integration with NIST RMF →Cryptographic products should offer a means to recover data when the encryption key cannot be used because it has been lost, damaged or has failed.
new-zealand-information-security-manual-nzism::17.1.52.C.02 · 17.1.52.C.02 Data recovery capability in cryptographic products →Be able to restore systems and data from a secure image or copy to get a clean system, with governance keeping backup images current and working, adequate backup of essential information and software, retention periods and restore scenarios prioritising critic...
BIMCO-10.4 · Data recovery capability →The organisation can enact the response plan, limit impact on essential functions and base decisions on timely information. Achieved: needed resources and information are understood and arranged, responders have the skills, knowledge and authority to act, key...
uk-ncsc-caf::D1.b · D1.b Response and recovery capability →Dutyholders have the resources, information, skills and authority to enact the plan and limit impact on essential functions, including prioritised recovery of systems, capacity for protracted incidents lasting weeks, fail-over mechanisms and tested external su...
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-RRC · Response and recovery capability and backups →The organization should carry out a needs analysis that identifies or sets: its strategic objectives; the risks it faces; the legal and regulatory requirements that apply;
iso-22398-2013::4.2.1 · Establishing the need for an exercise programme →Questions people ask about recovery capability
What is Recovery Capability?
Why is Recovery Capability important for compliance?
Which compliance frameworks address Recovery Capability?
Where can I learn more about Recovery Capability?
See how Recovery Capability applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.