Criterion CC7.5The entity identifies, develops, and implements activities to recover from identified security incidents.

What it says

The entity identifies, develops, and implements activities to recover from identified security incidents.

SOC 2, the trust services criteria, CC7.5

What is in the packs for this

Each one helps with this requirement.

• XLSExcel

  Trust Services Criteria Response Register

  in SOC 2 Report ReadinessThe register has a row for this criterion, for you to write down your own controls, owners and evidence against it. Lists the 61 Trust Services Criteria by number and series title, with blank columns for your own controls, owners and evidence. It makes no coverage claim.
• DOCWord

  Cyber Recovery Operating Procedure

  in Business Continuity, Disaster Recovery & Cyber ResilienceIts Framework References cite this criterion. Sequences recovery after a destructive attack: assess, isolate, rebuild clean, restore data, validate, return to service.
• DOCWord

  Cyber Recovery Plan Template

  in Business Continuity, Disaster Recovery & Cyber ResilienceIts Framework References cite this criterion. Service-level recovery plan with priorities, dependencies, clean-build sources and decision authorities.
• DOCWord

  IT Disaster Recovery Procedure

  in Business Continuity, Disaster Recovery & Cyber ResilienceIts Framework References cite this criterion. Recovers the systems a critical service needs after a failure that is not an attack: the failover decision, each system's recovery method and runbook, and failback.