Jeremy Pickett 3/4/25 Jeremy Pickett 3/4/25

RC.CO-3: Communications

Recovery activities are communicated to internal and external stakeholders as well as executive and management teams.

Jeremy Pickett 3/3/25 Jeremy Pickett 3/3/25

RC.CO-2: Communications

Reputation is repaired after an incident.

Jeremy Pickett 2/28/25 Jeremy Pickett 2/28/25

Public relations are managed.

Jeremy Pickett 2/26/25 Jeremy Pickett 2/26/25

Recovery strategies are updated.

Jeremy Pickett 2/25/25 Jeremy Pickett 2/25/25

Recovery plans incorporate lessons learned.

Jeremy Pickett 2/24/25 Jeremy Pickett 2/24/25

Recovery plan is executed during or after a cybersecurity incident.

Jeremy Pickett 2/21/25 Jeremy Pickett 2/21/25

Response plans incorporate lessons learned.

Jeremy Pickett 2/20/25 Jeremy Pickett 2/20/25

Newly identified vulnerabilities are mitigated or documented as accepted risks.

Jeremy Pickett 2/19/25 Jeremy Pickett 2/19/25

Incidents are mitigated.

Jeremy Pickett 2/18/25 Jeremy Pickett 2/18/25

Incidents are contained.