RC.RP-01.347
Have all personnel with recovery responsibilities been formally trained on the recovery plans and their specific authorization levels?
Explanation
This question assesses whether your organization has properly prepared staff who will be involved in disaster recovery or business continuity operations. Proper awareness ensures that during a crisis, personnel understand their roles, know what actions they're authorized to take, and can execute recovery procedures without delays or confusion. Evidence could include training records showing that recovery team members have been briefed on the plans, documentation of role-specific training sessions, signed acknowledgments from staff confirming their understanding of recovery responsibilities, or records of recovery simulation exercises where staff demonstrated their knowledge of the plans and authorization requirements.
Implementation Example
Make all individuals with recovery responsibilities aware of the plans for recovery and the authorizations required to implement each aspect of the plans
ID: RC.RP-01.347
Context
- Function
- RC: RECOVER
- Category
- RC.RP: Incident Recovery Plan Execution
- Sub-Category
- The recovery portion of the incident response plan is executed once initiated from the incident response process

