Recovery Testing
What is Recovery Testing?
The verification that backup data and disaster recovery procedures can successfully restore systems and data within defined timeframes.
Terms that appear alongside recovery testing
Each of these is named in at least one of the same controls as recovery testing. The number is how many controls name both.
- encryption 3 shared controls
- ransomware 3 shared controls
- lessons learned 3 shared controls
- incident response 3 shared controls
- disruption 2 shared controls
- crisis management 2 shared controls
- cybersecurity 2 shared controls
- failover 2 shared controls
Frameworks that govern recovery testing
What the standards actually require on recovery testing
Requirements naming recovery testing across 4 standards, quoted from the control text.
Cybersecurity exercises + drills are mandated per FSA Cybersecurity Guidelines for Tier 2/3 institutions + coordinated industry-wide via Delta Wall + FISC. (1) Institutional Tabletop Exercises: (a) Annual minimum per FSA expectation;
JP-FSA-CYB-Cybersecurity-Exercises-Drills-Annual-Tabletop-Industry-Wide-Exercise-Delta-Wall-FSA-Coordinated-Sector · Japan FSA Cybersecurity Exercises + Drills + Annual Tabletop + Industry-Wide Exercise + Delta Wall + FSA Coordinated Sector-Wide + FISC Drills + Cross-Sector Crisis Coordination + International Exercises + Cyber Range →Document and communicate backup and recovery policies fixing backup scope, frequency and retention against contractual and internal RTO and RPO targets, requiring state of the art encryption of backups, restricting restores to authorised persons and mandating...
C5-OPS-06 · Data Backup and Recovery - Concept →UR E26 Goals 4 (Respond) + 5 (Recover) require incident response + recovery capabilities. Incident Response Plan (IRP) covers: detection triggers + classification (safety-impact + business-impact);
IACS-UR-E26-Respond-Recover-IncidentResponse-Recovery-Backup-Lessons · IACS UR E26 Respond + Recover Goals - Incident Response + Communication + Recovery + Backup + Lessons Learned →Develop and maintain Cyber Security Incident response plan per CIP-008-6 including: process for identifying + classifying + responding to + reporting reportable Cyber Security Incidents within 1 hour to E-ISAC and DHS CISA per EOP-004 + lessons learned within...
NERCCIP-6 · Incident Reporting and Response Planning + Recovery Plans (CIP-008 + CIP-009) →Questions people ask about recovery testing
What is Recovery Testing?
Why is Recovery Testing important for compliance?
Which compliance frameworks address Recovery Testing?
Where can I learn more about Recovery Testing?
See how Recovery Testing applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.