From the course: NIST Cybersecurity Framework (CSF) 2.0 Primer: From Fundamentals to Implementation by Pearson
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Recover (RC) function
From the course: NIST Cybersecurity Framework (CSF) 2.0 Primer: From Fundamentals to Implementation by Pearson
Recover (RC) function
The recover function kind of comes after the response function. Once we put out the fire, we need to start rebuilding. So that's where recovery comes in. And this defines it as assets and operations affected by a cybersecurity incident are restored. So we just kind of get things back to normal, back to status quo. And there's only the two categories in this one as well, and they are incident recovery plan execution. So I don't want to cross it out, excuse me, but execution of the plan if we've got a plan, which hopefully we do. That's rc.rp. And then incident recovery communication. So kind of keeping open lines of communication with affected parties. Those are the two categories within this broader function. They do have their own subcategories, of course, but it's still a smaller side. As far as functions go, it's on the smaller side. All right, let's look at these individually. First off, for Incident Recovery Plan Execution, rc.rp, this is going to involve hopefully a plan, like…