Home » Functions » Playbook (RC.PL) » RC.PL-3 Resulting Recovery Processes

Description

Determine a set of recovery processes to be completed. These may include but not limited to restoration of backup data, switching to alternate ISP, route and site, invoking business continuity plan, cyber security monitoring of service [32], measuring metrics, e.g. service level agreements (SLAs), operational level agreements (OLAs) and key performance indicators (KPIs) to understand service performance, and hence decide whether to operate at a reduce capacity or stop the service entirely. It should also encompass notification, escalations and reporting, and disclosures.

Outcomes / Outputs

(Conduct / Fix / Ingest / List / Plan / Procure / Produce / Report / Review / Set / Test  / Train )

1. List of recovery processes, these may include restoration of backup data, switching to alternate ISP, route and site, invoking business continuity plan, cyber security monitoring of service [32], measuring metrics etc

Reference

32. Cyril Onwubiko and Karim Ouazzane (2019), “Challenges towards Building an effective Cyber Security Operations Centre”, International Journal on Cyber Situational Awareness (IJCSA), Vol. 5, No.1, 2019. Retrieved Dec. 2019. https://www.c-mric.com/100124