Guide for Cybersecurity Event Recovery
National Institute of Standards and Technology
What to do after containment: planning recovery, defining processes and criteria, measuring how recovery is going, and running the exercises that make a plan hold up under pressure. Includes one worked scenario for ransomware and one for data integrity loss.
Loading the book...
Keep reading
-
Next in this topic
Guide to Malware Incident Prevention and HandlingCovers the categories of malware and the attacker tools that come with them, the layered defenses that reduce exposure, and the handling process once something gets through, from detection and containment to eradication and recovery.
Verified PDF · Secure download - StopRansomware Guide
A joint advisory in two parts: the prevention practices that close the initial access routes ransomware relies on, and a response checklist for the first hours of an incident, covering detection, isolation, reporting, and why paying the ransom rarely works.
Verified PDF · Secure download - ENISA Threat Landscape 2025
An annual assessment of what is actually happening in attacks: the prime threat categories, the sectors being targeted, the techniques observed in the wild, and the trends behind them. Useful when you need evidence rather than anecdotes to argue for a security investment.
Verified PDF · Secure download - Cybersecurity Threats with New Perspectives
An edited collection of open access research chapters on current problem areas, including intrusion detection, security in critical infrastructure, the legal and organizational side of cyber crime, and the human factors that decide whether an attack succeeds.
Verified PDF · Secure download - Cyber Essentials Starter Kit
A short toolkit built around six areas of cyber readiness, with separate action lists for leaders and for whoever actually runs the systems. Every chapter ends with concrete first steps, which makes it a good starting point for a team with no security program yet.
Verified PDF · Secure download
