RC.RP - Incident Recovery Plan Execution

RC.RP describes the organization's procedures for executing its incident recovery plan, coordinating resources and actions to restore affected systems to normal operation after a cybersecurity event. It ensures that recovery activities are documented, roles are defined, and validation steps are performed to confirm restored functionality before resuming business processes.