RC.RP-06:
The end of incident recovery is declared based on criteria, and incident-related documentation is completed
Implementation Examples
Ex1:
Prepare an after-action report that documents the incident itself, the response and recovery actions taken, and lessons learned
Ex2:
Declare the end of incident recovery once the criteria are met