Understand and establish recovery capabilities and gaps for the organization. Recovery capabilities include technology, process, policy, procedural and people aspects. Understanding the knowledge gap, the training and education needs, and the technological and process gaps are extremely important. These gaps will then inform what decisions management may take around alternative and compensating approaches to addressing recovery needs. For example, if the gaps may not be addressed in the short to medium term, then the organization may procure a recovery call-off contract (see RCC.CI-4).
© 2017 – 2020, C-MRIC.ORG, C-MRIC.COM and Cyber Recovery Operational Framework are registered trademarks of the C-MRIC organisation.