SANS Incident Handler's Handbook and PICERL Methodology
Recovery

SANS Incident Handler's Handbook and PICERL Methodology PICERL-R-02: Recovery: Validation and Monitoring

Validate restored systems are clean using independent scans, baseline comparisons, and enhanced monitoring for a defined hyper care period before declaring recovery complete.

Maintained by Gerard BlokdykControl text last updated

Other controls in Recovery

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SANS Incident Handler's Handbook and PICERL Methodology controls