NIST SP 800-184 Guide for Cybersecurity Event Recovery

Section 2: Planning for cyber event recovery – NIST SP 800-184 Guide for Cybersecurity Event Recovery

NIST SP 800-184 Guide for Cybersecurity Event Recovery 2.1b: Identify the key recovery personnel and make sure they know their roles

What does 2.1b require?

Among the first planning steps the organisation identifies and documents the people responsible for defining recovery criteria and plans at each organisational tier, and ensures that all of them understand their roles and responsibilities, which may differ from their roles in a physical disaster.

Maintained by Gerard Blokdyk

Other controls in Section 2: Planning for cyber event recovery – NIST SP 800-184 Guide for Cybersecurity Event Recovery

2.1a Plan to operate in a diminished capacity and restore services in priority order
2.1c Keep a complete inventory of mission-enabling assets and their dependencies, including hosted services
2.1d Categorise assets by importance and map interdependencies to set the restoration sequence
2.2a Identify critical systems and model threats before an event to produce a dependency map
2.2b Protect the recovery plan like a system security plan and contain resources that need not touch key assets
2.2c Understand the roots of trust: identities and boundaries, management access control and data integrity
2.3.1 Document a recovery plan covering agreements, authority, team, procedures, communications, off-site storage and workarounds
2.3.2a Develop recovery processes as a staged playbook with exit criteria plus automated technical procedures

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-184 Guide for Cybersecurity Event Recovery controls