Skip to content
OT principles
ASD Essentials

Essentials for OT

REC-02 System recovery assurance

one actionNot in enterprise IT

Be sure you can bring critical systems back yourself after an incident. Keep the ability to recover systems that cannot acceptably stay offline, without relying on suppliers, to at least a minimum viable level of service. Plan how to replace key OT devices after destructive attacks.

Reviewed 18 October 2026 · Current to ASD's Essentials for OT, published 15 October 2026

The principle

Following cyber security incidents, systems (infrastructure, operating systems, applications and data) are verified through assurance activities to ensure they are secure and capable of supporting the resumption of normal business operations.

ASD, Information Security Manual (ISM), Principle REC-02

The action

ASD's actions are quoted as published in Essentials for OT. ASD has not given them IDs, so they are numbered by position.

  1. Action 1 of 1

    Maintain the capability to recover, without supplier support, any system that cannot acceptably remain offline, at least to a minimum viable level of service, including a plan to replace key OT devices following destructive attacks.

    In plain English: Without supplier help, be able to restore systems that cannot acceptably stay offline, to at least minimum viable service. Plan to replace key OT devices after destructive attacks.

    Domains
    Visibility and response

See all 34 principles in Essentials for OT, or read our OT guide.

Sources

The ASD publications this page quotes.

Quoted ASD material © Commonwealth of Australia 2026, licensed under CC BY 4.0.

Everything else on this page is written by Control Stack.