Citation Tagging

Citation Reference: 2.5.2.6. Fundamental response measures (1)

Citation Guidance: In recovery planning, it is essential to clearly define the authority responsible for deciding when recovery is complete and operations can resume, as well as to organize the criteria for making that decision. Resuming operations without identifying and addressing the root cause of the incident may result in repeated attacks and further damage. Therefore, the decision criteria for resuming operations should include confirmation that appropriate measures have been taken to address the cause of the incident.