Skip to content

System Recovery

What is System Recovery?

The process of restoring an information system to operational status after a disruption, failure, or security incident.

Business Continuity

Frameworks that govern system recovery

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →

What the standards actually require on system recovery

Requirements naming system recovery across 6 standards, quoted from the control text.

ASD Strategies to Mitigate Cyber Security Incidents1 control

System recovery capabilities including standard operating environment images to restore computers to a known good state.

ASD37-36 · System recovery capabilities (Very Good) →
FedRAMP High1 control

System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based

CP-10(2) · System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based →
FedRAMP Moderate1 control

System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based

CP-10(2) · System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based →
NIST SP 800-53 Rev 51 control

Requires the system to be recoverable and reconstitutable to a known state within an organization-defined period consistent with its recovery time and recovery point objectives after disruption, compromise or failure.

NIST800-CP-10 · System recovery and reconstitution →
NIST SP 800-53 Rev 5 MODERATE1 control

System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based

CP-10(2) · System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based →
NIST SP 800-53 Revision 5.1 HIGH1 control

System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based

CP-10(2) · System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based →

Questions people ask about system recovery

What is System Recovery?
The process of restoring an information system to operational status after a disruption, failure, or security incident.
Why is System Recovery important for compliance?
System Recovery is a key concept in Business Continuity. Understanding system recovery helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address System Recovery?
System Recovery appears in the requirement text of ASD Strategies to Mitigate Cyber Security Incidents, FedRAMP High, FedRAMP Moderate, NIST SP 800-53 Rev 5, NIST SP 800-53 Rev 5 MODERATE. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about System Recovery?
Explore our compliance framework pages to see how system recovery applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how System Recovery applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.