Sekit CSF · Backup & Recovery · Process
RCF-0254DR exercises
Disaster recovery exercises are consistently conducted and findings drive improvements to recovery plans
Mapping at a glance
RCF-0254DR exercisesBackup & Recovery · Process
RCF-0254 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.27Learning from information security incidentsrelatedFeeding disaster recovery exercise failures back into the recovery plan is the same learning loop this control asks for, applied to continuity rather than incident response.A.5.30ICT readiness for business continuitysupportsRunning disaster recovery exercises on schedule and feeding failures back into the plan tests part of ICT readiness, but exercising alone does not prove the underlying architecture or capacity can meet the recovery targets.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.IR-04Adequate capacity maintainedRC.RP-01Recovery plan executedRC.RP-02Recovery actions performed
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Disaster recovery plan and runbooks
The plan defining how long each critical system can be down (RTO/RPO) and the step-by-step guides to recover it after a serious failure.
From the Sekit evidence catalog
This topic through the other lenses
All Backup & Recovery controls
Ask Sekura: “What evidence proves RCF-0254?”
Also via MCP, free with account