Sekit CSF · Backup & Recovery · Policy
RCF-0253DR exercises
Disaster recovery is formally exercised on a regular schedule to validate recovery capability
Mapping at a glance
RCF-0253DR exercisesBackup & Recovery · Policy
RCF-0253 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.29Information security during disruptionsupportsA written commitment to exercise disaster recovery on a fixed schedule is how a company confirms its security posture survives a failover, not only that data comes back.A.5.30ICT readiness for business continuitysupportsA written commitment to exercise disaster recovery on a fixed schedule is how the ICT readiness this control requires gets tested rather than assumed.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.IR-04Adequate capacity maintainedRC.RP-01Recovery plan executedRC.RP-02Recovery actions performed
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Disaster recovery plan and runbooks
The plan defining how long each critical system can be down (RTO/RPO) and the step-by-step guides to recover it after a serious failure.
From the Sekit evidence catalog
This topic through the other lenses
All Backup & Recovery controls
Ask Sekura: “What evidence proves RCF-0253?”
Also via MCP, free with account