RC.RP-02—Recovery actions are selected, scoped, prioritized, and performed

>Control Description

This incident recovery plan execution subcategory ensures that recovery actions are selected, scoped, prioritized, and performed. Key activities include: Select recovery actions based on the criteria defined in the incident response plan and available resources; Change planned recovery actions based on a reassessment of organizational needs and resources.

>Cross-Framework Mappings

>Informative References

Official NIST mappings to external frameworks and standards. Source: NIST CSF 2.0

CCMv4.0

SEF-06

CRI Profile v2.0

RC.RP-02

RC.RP-02.01

RC.RP-02.02

CSF v1.1

RC.RP-1

ISO/IEC 27001:2022

Mandatory Clause: None

Annex A Controls: 5.26

NICE Framework

DD-WRL-002

IO-WRL-005

OG-WRL-014

OG-WRL-015

PD-WRL-003

PD-WRL-004

PCI DSS

12.10.1

12.10.2

12.10.6

1.2.3

1.2.4

SCF

BCD-01

BCD-01.4

BCD-02

BCD-02.1

SP 800-171 Rev 3

03.06.01

03.06.05

SP 800-53 Rev 5.1.1

CP-10

IR-04

IR-08

SP 800-53 Rev 5.2.0