{"schema":"https://ver.cy/schemas/card/1.0.0","id":"EM-RSK-04","code":"em-rsk-04","url":"https://ver.cy/models/em-rsk-04/","name":"Continuity, backup and recovery","alternateNames":[],"kind":"enterprise-contour","status":"research-draft","version":"research-checkpoint","language":"en","classifiers":{"family":"Enterprise profiles","category":"Enterprise subject","entryKind":"subject","plane":"","domain":["Enterprise","RSK"],"industry":["Cross-industry"],"navPath":"","tags":["EM-RSK-04","W2","subject","BusinessImpactAnalysis","ContinuityPlan","BackupPolicy","RestoreTest","RecoveryEvidence"],"facets":{}},"whatItIs":"Criticality, continuity plan, backup policy, recovery objective, exercise and recovery evidence. A successful backup does not confirm recoverability.","purpose":"Criticality, continuity plan, backup policy, recovery objective, exercise and recovery evidence. A successful backup does not confirm recoverability.","scope":{"in":[],"out":[],"boundaries":[]},"distinguishingFeatures":["RTO/RPO have a scope and a verification method","Backup and restore are distinct","A test records versions and the result"],"structure":{"bundles":[]},"agentConduct":{"may":[],"mustNot":["Negative case: A green backup job means RTO and RPO are met."],"requiresHuman":[]},"ethics":{"considerations":[],"affectedParties":[]},"owners":{"steward":"Владелец рисков / CISO / внутренний аудит","roles":[],"masterSystems":["GRC","IAM","SIEM","сервис-деск"]},"relations":[{"target":"EM-OPS-01","type":"neighbor"},{"target":"EM-PRD-02","type":"neighbor"},{"target":"EM-TEC-04","type":"neighbor"},{"target":"WM-ACT-043","type":"references","note":"conceptual-candidate"}],"interaction":{"identity":{"applicability":"required","items":["BusinessImpactAnalysis","ContinuityPlan","BackupPolicy","RestoreTest","RecoveryEvidence"]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"required","items":[]},"capabilities":{"applicability":"required","items":[]},"hazards":{"applicability":"required","items":[]},"interfaces":{"applicability":"required","items":[]},"context":{"applicability":"required","items":[]}},"sources":[{"title":"NIST CSF/AI RMF: governance and risk functions"},{"title":"ODRL/PROV: authority, grounds and evidence"},{"title":"GRC/IAM/BCM practice and NIST SP 800-34 for recovery"}],"openQuestions":["How to link RTO/RPO to the business need?","Which dependencies must recover first?","What proves an actual recovery?","Установить границу и решение reuse/extend/new по действующим спецификациям.","Подтвердить semantic crosswalk, права и source mastership.","Выбрать immutable refs; провести проверки fixtures до заявления о публикационной готовности."],"resources":{"source":"https://ver.cy/enterprise/models/em-rsk-04/"},"provenance":{"origin":"enterprise research programme","builtFrom":["enterprise/models/em-rsk-04/brief.json"],"providers":[],"researchStatus":"published-partial","generatedAt":"","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"derived","structure":"missing","agentConduct":"derived","ethics":"missing","owners":"filled","relations":"filled","interaction.identity":"derived","interaction.properties":"not-applicable","interaction.recognition":"missing","interaction.capabilities":"missing","interaction.hazards":"missing","interaction.interfaces":"missing","interaction.context":"missing","sources":"filled"},"notes":{"agentConduct":"Negative case of the research brief, not yet a rule for agents.","interaction.properties":"Enterprise record contour: physical properties belong to referenced world models.","structure":"Research contour: bundles not designed yet; questions are listed as open questions.","language":"Still in Russian: suggested owner, blocking decisions, vercy candidates. Translate in research/enterprise/i18n/units.en.json."},"score":0.469}}