NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management 6.10.2.2: Recovery plan contents: damage assessment, coordinated restoration, supply chain, stakeholder communications, critical process recovery, roles, support personnel, data controls, applicable regulations and pre-incident controls

What does 6.10.2.2 require?

Recovery plans are required to record: the damage assessment; how the restoring, rebuilding and replacing of facilities, infrastructure, equipment, materials, tools, suppliers and vendors is coordinated; how the supply chain is brought back; ongoing communication with stakeholders; recovery of critical, time-sensitive processes together with the technology, systems, applications and information behind them; who carries out recovery and what each of them is responsible for; the internal and external personnel, and the contracts, that support recovery; controls that stop data being corrupted or accessed unlawfully while recovery is under way; meeting any regulations that start to apply during recovery; and keeping the controls in place before the incident.