NIST CSF template · NIST CSF 2.0
Recovery Planning Policy
Recovery processes ensure restoration of systems or assets affected by cybersecurity incidents. (NIST CSF 2.0: RECOVER, RC.RP) Written for your company, citing the controls below.
- Sections
- 7
- Controls cited
- 6
- Formats
- PDF, Word
- Shelf
- 10 NIST CSFdocuments in all
No card needed to start.
NIST CSF7 sections
Recovery Planning PolicyRecovery processes ensure restoration of systems or assets affected by cybersecurity incidents. (NIST CSF 2.0: RECOVER, RC.RP)
- Cites
- RC.RP-1, RC.CO-1, SOC 2 A1.2 and 3 more
- Formats
- PDF and Word
NIST CSF shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Recovery Objectives
- Recovery Procedures
- Backup Strategy
- Recovery Testing
- Post-Recovery Validation
- Recovery Plan Maintenance
Controls it cites
The NIST CSF controls first, then the matching controls in other frameworks.
- RC.RP-1Recovery Plan ExecutionNIST CSF
- RC.CO-1Recovery CommunicationNIST CSF
- SOC 2 A1.2Availability: RecoverySOC 2
- SOC 2 A1.3Availability: Recovery TestingSOC 2
- ISO A.5.30ICT Readiness for Business ContinuityISO 27001
- HIPAA §164.308(a)(7)Contingency PlanHIPAA
- NIST CSF7 sections
Communications Policy
CitesRS.CO-2 RC.CO-1 SOC 2 CC2.2 +4 +5PDF · WordCites RS.CO-2, Incident Reporting (NIST CSF); RC.CO-1, Recovery Communication (NIST CSF); SOC 2 CC2.2, COSO Principle 14: Internal Communication (SOC 2), and 4 more. - NIST CSF7 sections
Asset Management Policy
CitesID.AM-1 ID.AM-2 ID.AM-5 +4 +5PDF · WordCites ID.AM-1, Hardware Inventory (NIST CSF); ID.AM-2, Software Inventory (NIST CSF); ID.AM-5, Resource Prioritization (NIST CSF), and 4 more. - NIST CSF7 sections
Risk Assessment Policy
CitesID.RA-1 ID.RA-3 ID.RA-5 +5 +6PDF · WordCites ID.RA-1, Vulnerability Identification (NIST CSF); ID.RA-3, Threat Identification (NIST CSF); ID.RA-5, Risk Response (NIST CSF), and 5 more. - NIST CSF7 sections
Access Control Policy
CitesPR.AA-1 PR.AA-3 PR.AA-5 +5 +6PDF · WordCites PR.AA-1, Identity Management (NIST CSF); PR.AA-3, Remote Access (NIST CSF); PR.AA-5, Access Permissions (NIST CSF), and 5 more. - NIST CSF7 sections
Security Awareness & Training Policy
CitesPR.AT-1 SOC 2 CC1.4 SOC 2 CC2.2 +4 +5PDF · WordCites PR.AT-1, Awareness & Training (NIST CSF); SOC 2 CC1.4, COSO Principle 4: Competence Commitment (SOC 2); SOC 2 CC2.2, COSO Principle 14: Internal Communication (SOC 2), and 4 more. - NIST CSF7 sections
Data Security Policy
CitesPR.DS-1 PR.DS-2 PR.DS-5 +5 +6PDF · WordCites PR.DS-1, Data at Rest (NIST CSF); PR.DS-2, Data in Transit (NIST CSF); PR.DS-5, Data Leak Protection (NIST CSF), and 5 more.
NIST CSF on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so NIST CSF + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.