Law / Frameworks / NIST CSF 2.0 / Recover
NIST CSF 2.0, RecoverRC.CO-03
Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholdersNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), RC.CO-03
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 New York |
DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment |
The Department says you should consider reviewing or developing threat-relevant personnel, customer and third-party communication strategies sufficient to address prolonged system and service disruptions; if you use operational technologies, confirming that critical system functions can operate if other information systems are unavailable or compromised; and monitoring financial transactions, including virtual currency business activity, to ensure compliance with applicable orders and guidance on sanctions and anti-money laundering. |
Vulnerability and incident reporting
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Portugal |
Regime JurÃdico da Cibersegurança, Significant-Incident Reporting Obligations |
Submit a notification that the incident's significant impact has ended, without undue delay and within 24 hours of that impact ending. |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.