System Recovery
IT IT Ops
The prompt
Plan system recovery from clean backups after containment and eradication to restore normal operations.
Why this works
Recovery from clean backups ensures attacker code isn't reintroduced. Testing prevents recovery failures.
Risks & review
Backups may be infected. Recovery can take days. Incomplete recovery leaves backdoors.