RC.RP-06: The end of incident recovery is declared based on criteria, and incident-related documentation is completed

Info icon.

Subcategory is new to this version of the framework.


[csf.tools Note: Subcategories do not have detailed descriptions. However NIST has provided the following implementation examples.]

Implementation Examples

1st: 1st Party Risk

Ex1: Prepare an after-action report that documents the incident itself, the response and recovery actions taken, and lessons learned

Ex2: Declare the end of incident recovery once the criteria are met