KSI-RPL-RRO — Reviewing Recovery Objectives
Official CR26 Key Security Indicator in the Recovery Planning family (KSI-RPL). The statement below is verbatim from the catalog.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
Official requirement
The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities.
Assessment considerations
Official related SP 800-53 controls: CP-02 (03), CP-10.
Static HTML reference: scm.cc/ksi/ksi-rpl-rro/. Interactive view: KSI Explorer (in progress).
Related hub pages
Primary sources
- FedRAMP 20x Key Security Indicators (CR26) (retrieved 2026-09-27)
Last verified 2026-09-27. FedRAMP.gov is authoritative.