Generated from the official FedRAMP/docs GitHub repo. Source path: FRMR.documentation.json on main at blob 5c6bfee74029. FRMR version: 0.9.43-beta · upstream last_updated: 2026-04-08. The official FedRAMP/rules repo exists, but grclanker still treats FedRAMP/docs as the active source until structured rules land there.

Recovery Planning

Domain code: RPL · Domain ID: KSI-RPL · Web slug: recovery-planning

Theme

A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss during incidents and contingencies.

Indicators

KSI-RPL-ABO (formerly KSI-RPL-03) — Aligning Backups with Objectives

Persistently review the alignment of machine-based information resource backups with defined recovery objectives.

Mapped Rev5 controls: cm-2.3, cp-6, cp-9, cp-10, cp-10.2, si-12

Terms: Information Resource, Machine-Based (information resources), Persistently

Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

KSI-RPL-ARP (formerly KSI-RPL-02) — Aligning Recovery Plan

Persistently review the alignment of recovery plans with defined recovery objectives.

Mapped Rev5 controls: cp-2, cp-2.1, cp-2.3, cp-4.1, cp-6, cp-6.1, cp-6.3, cp-7, cp-7.1, cp-7.2, cp-7.3, cp-8, cp-8.1, cp-8.2, cp-10, cp-10.2

Terms: Persistently

Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

KSI-RPL-RRO (formerly KSI-RPL-01) — Reviewing Recovery Objectives

Persistently review desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).

Mapped Rev5 controls: cp-2.3, cp-10

Terms: Persistently

Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

KSI-RPL-TRC (formerly KSI-RPL-04) — Testing Recovery Capabilities

Persistently test the capability to recover from incidents and contingencies, including alignment with defined recovery objectives.

Mapped Rev5 controls: cp-2.1, cp-2.3, cp-4, cp-4.1, cp-6, cp-6.1, cp-9.1, cp-10, ir-3, ir-3.2

Terms: Incident, Persistently

Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.