Annex I · Objective 06
Recover
Retrieve organizes safe replacement of services and communication until formal closure of recovery.
Complete structure
Categories and controls.
Select each category to see all the codes and titles that make up it.
RC.PRRecovery Plan6 checks
- RC.PR-1
The entity follows a recovery plan during or after an incident.
- RC.PR-2
Recovery actions are defined, prioritized and executed.
- RC.PR-3
The integrity of backups and other restoration assets is checked before use.
- RC.PR-4
The entity considers critical services and risks to establish post-incident operational standards.
- RC.PR-5
The integrity of the restored assets is verified and normal functioning is confirmed.
- RC.PR-6
The end of recovery is documented and declared on the basis of predefined criteria.
RC.COCommunications2 checks
- RC.CO-1
Recovery activities shall be communicated to interested parties and management bodies.
- RC.CO-2
Recovery updates are shared using approved methods.
Application
How to work every control.
- Confirm full description in Annex I
- Set scope and responsibility
- Relating control with risk and critical services
- Associate implementation and evidence
- Record gaps, priority and deadline
- Review implementation and effectiveness
Primary source
Regulation No. 756/2026, of 22 June — Annex I
The codes and titles reproduce the structure of Annex I. Please refer to the official act for the full description and normative references of each control.