Effective Date: January 03, 2022
Expiration Date: January 03, 2027
|| TOC | Preface | Chapter1 | Chapter2 | Chapter3 | Chapter4 | Chapter5 | Chapter6 | AppendixA | AppendixB | AppendixC | AppendixD | AppendixE | ALL ||
184.108.40.206 This section establishes requirements for processes and procedures to ensure recovery from an incident.
6.1.2 Incident Recovery Planning Policy
220.127.116.11 The SAISO shall develop and maintain a NASA-wide Incident Recovery Plan, which contains processes and procedures for incorporating lessons learned from incident response activities. The Incident Recovery Plan may be executed during or after information security incidents and may be included in the Incident Response Plan
18.104.22.168 This section establishes requirements for the improvement of incident recovery efforts.
6.2.2 Incident Recovery Improvement Policy
22.214.171.124 The SAISO shall incorporate lessons learned from current or prior incidents in the Incident Recovery Plan required by section 126.96.36.199.
188.8.131.52 This section establishes requirements for communications to internal and external stakeholders regarding recovery from an Incident.
6.3.2 Incident Recovery Communications and Coordination Policy
184.108.40.206 The SAISO shall ensure the plan required by section 220.127.116.11 includes:
a. A public relations management strategy that works to restore trust in NASA’s mission capabilities.
b. Procedures for communications with internal and external stakeholders as well as executive and management teams.
| TOC | Preface | Chapter1 | Chapter2 | Chapter3 | Chapter4 | Chapter5 | Chapter6 | AppendixA | AppendixB | AppendixC | AppendixD | AppendixE | ALL |
|| NODIS Library | Legal Policies(2000s) | Search ||
This document does not bind the public, except as authorized by law or as incorporated into a contract. This document is uncontrolled when printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: https://nodis3.gsfc.nasa.gov.