ISO/IEC 27031:2025
Determining the ICT continuity plan – ISO/IEC 27031:2025

ISO/IEC 27031:2025 10.3.5: Response and recovery procedures

What does 10.3.5 require?

The recovery plans should contain the response and recovery procedures the recovery organization follows from activation to restoration: assessment of the situation, containment where the disruption is a security incident, the recovery steps in order, communication at each stage, the criteria for declaring services recovered, and the transition back to normal operation, written so that competent staff other than the author can execute them under pressure.

Maintained by Gerard Blokdyk

Other controls in Determining the ICT continuity plan – ISO/IEC 27031:2025

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.