Generated from the official FedRAMP/rules GitHub repo. Source path: fedramp-consolidated-rules.json on main at blob 7d628b63fdd9. Consolidated Rules version: 2026.07.02.02 · upstream last_updated: 2026-07-02. Supporting narrative documentation is available from the official FedRAMP/2026-markdown repository.

Recovery Planning

Domain code: RPL · Domain ID: KSI-RPL · Web slug: recovery-planning

Indicators

KSI-RPL-ABO — Aligning Backups with Objectives

The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed.

Mapped Rev5 controls: cm-2.3, cp-6, cp-9, cp-10, cp-10.2, si-12

Terms: Information Resource, Machine-Based (Information Resources), Persistently

Recent update: 2026-06-24 — Official launch of the FedRAMP Consolidated Rules for 2026.

KSI-RPL-ARP — Aligning Recovery Plan

The alignment of recovery plans with defined recovery objectives is persistently reviewed.

Mapped Rev5 controls: cp-2, cp-2.1, cp-2.3, cp-4.1, cp-6, cp-6.1, cp-6.3, cp-7, cp-7.1, cp-7.2, cp-7.3, cp-8, cp-8.1, cp-8.2, cp-10, cp-10.2

Terms: Persistently

Recent update: 2026-06-24 — Official launch of the FedRAMP Consolidated Rules for 2026.

KSI-RPL-RRO — Reviewing Recovery Objectives

The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider’s business needs and capabilities.

Mapped Rev5 controls: cp-2.3, cp-10

Terms: Persistently, Provider

Recent update: 2026-06-24 — Official launch of the FedRAMP Consolidated Rules for 2026.

KSI-RPL-TRC — Testing Recovery Capabilities

The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested.

Mapped Rev5 controls: cp-2.1, cp-2.3, cp-4, cp-4.1, cp-6, cp-6.1, cp-9.1, cp-10, ir-3, ir-3.2

Terms: Incident, Persistently

Recent update: 2026-06-24 — Official launch of the FedRAMP Consolidated Rules for 2026.