NIST SP 800-184 Guide for Cybersecurity Event Recovery
Section 5: Building the playbook – NIST SP 800-184 Guide for Cybersecurity Event Recovery

NIST SP 800-184 Guide for Cybersecurity Event Recovery 5b: Run the strategic phase: improvement plan, continued communications and review of milestones and metrics

What does 5b require?

In the strategic phase the organisation develops and implements an improvement plan for its overall security posture based on the tactical results, continues executing communications plans so internal stakeholders learn what must improve in people, processes and procedures and external stakeholders learn of impacts to them, and reviews the milestones, goals and metrics gathered in the tactical phase to quantify the effectiveness of the recovery and identify what needs improvement, feeding the lessons into the other functions.

Maintained by Gerard Blokdyk

Other controls in Section 5: Building the playbook – NIST SP 800-184 Guide for Cybersecurity Event Recovery

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.