The NIST CSF function aims to support a provider in rapidly recovering and mitigating the long term “Recover” impact of a cybersecurity event. This function supports providers in assessing the processes to maintain resiliency plans and support restoration of services impacted during an event. The organizational safeguards assessed include recovery planning, improvements, and communications. Recovery Planning (RC.RP): Assesses the organizational ability to execute and maintain recovery processes and procedures to ensure timely response to detected cybersecurity events. Readiness Appropriate processes to: RC.RP Informal Developing Established N/A 1 Execute a recovery plan during or after an event Improvements (RC.IM): Assesses the organization’s processes to improve recovery plans by incorporating lessons learned. Readiness Recovery Plans: RC.IM Informal Developing Established N/A 1 Incorporate lessons learned Are updated regularly to meet the needs of a 2 changing cyber landscape Communications (RC.CO): Assesses the organizations processes to coordinate restoration activities with internal and external parties, including coordinating centers, Internet Service Providers, cyber-attack victims, and vendors. Readiness Appropriate processes to: RC.CO Informal Developing Established N/A 1 Manage public relations 2 Repair reputation 3 Internally communicate recovery activities Please see on page 23 to calculate your score for “Scoring” “Protect.”
The NIST CSF “Recover” function aims to support a provider in rapidly recovering and mitigating the long term impact of a cybersecurity event. This function supports providers in assessing the processes to maintain resiliency plans and support restoration of services impacted during an event. The organizational safeguards assessed include recovery planning, improvements, and communications. Recovery Planning (RC.RP): Assesses the organizational ability to execute and maintain recovery processes and procedures to ensure timely response to detected cybersecurity events. RC.RP Appropriate processes to: Readiness Informal Developing Established N/A 1 Execute a recovery plan during or after an event Improvements (RC.IM): Assesses the organization’s processes to improve recovery plans by incorporating lessons learned. RC.IM Recovery Plans: Readiness Informal Developing Established N/A 1 Incorporate lessons learned 2 Are updated regularly to meet the needs of a changing cyber landscape Communications (RC.CO): Assesses the organizations processes to coordinate restoration activities with internal and external parties, including coordinating centers, Internet Service Providers, cyber-attack victims, and vendors. RC.CO Appropriate processes to: Readiness Informal Developing Established N/A 1 Manage public relations 2 Repair reputation 3 Internally communicate recovery activities Please see “Scoring” on page 23 to calculate your score for “Protect.”
cyber-security-self-assessment-tool.docx