Recovery Exercise
What is Recovery Exercise?
A planned test of recovery procedures to verify that systems and data can be restored within defined timeframes and objectives.
Frameworks that govern recovery exercise
What the standards actually require on recovery exercise
Requirements naming recovery exercise across 6 standards, quoted from the control text.
Restoration of data, applications and settings from backups to a common point in time is tested as part of disaster recovery exercises. Required at Maturity Levels One, Two and Three of the Regular backups mitigation strategy (Appendices A, B and C);
acsc-essential-eight::E8-BACKUP-ISM-1515 · Regular backups (ISM-1515): Restoration of data, applications and settings from backups to a common point in time is tested as part of disaster recovery exercises →Restoration of data, applications and settings from backups to a common point in time is tested as part of disaster recovery exercises.
ISM-1515 · Testing restoration to a common point →NSS-17 + NSS-42-G require continuous monitoring + detection + incident response + recovery aligned with CSL. Logging: all CBS log security-relevant events (authentication + authorization + privileged action + configuration change + network connection + system...
IAEA-NSS17-Detect-Monitor-Logging-IR-Recovery-Exercises · IAEA NSS-17 - Detection + Monitoring + Logging + Incident Response + Recovery + Computer Security Exercises →Each measure should answer the information need, relying on current practices or new ones, adapting existing measures where possible, and be defined in enough detail to implement.
iso-iec-27004-2016::8.3.3 · Develop or update measures →Operate recovery capability aligned with FIPS 199 impact level + NIST RMF integration per NIST SP 800-34 Rev 1 Appendix F (Sample Plans per Impact Level) + Chapter 4 (Information System Contingency Plan Development).
NISTSP34-8 · Recovery Capability by Impact Level, RTO/RPO, and Integration with NIST RMF →Operate business continuity + disaster recovery + resilience per Oman framework + sectoral requirements. Apply NIST SP 800-34 methodology including Business Impact Analysis + recovery strategies + ISCP development + testing + maintenance.
OMANCS-7 · Business Continuity, Disaster Recovery, and Resilience →Questions people ask about recovery exercise
What is Recovery Exercise?
Why is Recovery Exercise important for compliance?
Which compliance frameworks address Recovery Exercise?
Where can I learn more about Recovery Exercise?
See how Recovery Exercise applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.