Law / Frameworks / NIST CSF 2.0 / Recover
NIST CSF 2.0, RecoverRC.RP-02
Recovery actions are selected, scoped, prioritized, and performedNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), RC.RP-02
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST Privacy FrameworkPR.PO-P7 Response plans (Incident Response and Business Continuity) and recovery..., 2 laws
Security baseline statutes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Belarus |
Law No. 455-Z, Information System Operator's Duty to Protect Information (Article 40) |
Where necessary, take measures to restore information that has been lost. |
Vulnerability and incident reporting
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Gambia |
Information and Communications Act, 2009, security of information and communications services (subscriber risk notification) |
Notifying subscribers of a security risk does not excuse you from taking immediate measures to restore your service's normal security level. |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.
framework