rc-rp-05-rcrp-05

name	RC.RP-05_rcrp-05
description	The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed
category	configuration
version	2.0
author	cyberstrike-official
tags	["nist","csf","v2.0","rc-rp-05","rc","subcategory"]
tech_stack	["any"]
cwe_ids	[]
chains_with	[]
prerequisites	["Incident Recovery Plan Execution (RC.RP)"]
severity_boost	{}

RC.RP-05 RC.RP-05

Subcategory of: Incident Recovery Plan Execution (RC.RP)

High-Level Description

Function: RECOVER (RC) Framework: NIST Cybersecurity Framework v2.0

The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed

What to Check

• Verify RC.RP-05 RC.RP-05 outcome is achieved
• Review documentation and evidence for RC.RP-05
• Assess organizational maturity for RECOVER function
• Map to SP 800-53 controls that satisfy RC.RP-05

How to Test

Step 1: Identify Current Profile

Determine the organization's current and target CSF profile tier for RC.RP-05.

Step 2: Assess Outcome Achievement

# Review organizational policies and procedures
# Check for evidence that RC.RP-05 outcome is met
# Interview stakeholders responsible for RECOVER

Step 3: Map to Technical Controls

Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.

Tools

Tool	Purpose	Usage
cloud-audit-mcp	Assess cloud security posture	cloud_audit_* tools
Manual Review	Policy and procedure review	Interviews and documentation

Remediation Guide

Achieve the RC.RP-05 RC.RP-05 outcome:

The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed

Risk Assessment

Finding	Severity	Impact
RC.RP-05 RC.RP-05 outcome not achieved	Medium	RECOVER Function Gap

CWE Categories

CWE ID	Title
N/A	No direct CWE mapping

References