Critical Control 10 - Data Recovery Capability Properly back up critical information with a proven methodology for timely recovery. RS.RP-1 Response plan is executed during or after an incident