Cyber & IT Supervisory Forum - November 2023

Internal Use Only

R ‐ SAT v. 2.0: Question 12 (continued)

NEW: New control consideration (Control f) to address procedures in place to allow immediate off ‐ network restoration (cold site, warm site, hot site) of backups to facilitate continuity of essential operations while network systems are offline, being cleared, and/or reimaged following an incident. New control consideration (Control h) to address procedures to validate the sterility of data backups prior to restoration.

13

Internal Use Only

R ‐ SAT v. 2.0: Question 12 (continued)

NEW: Added ordered description fields for each control.

14