K07 · evidence-bundled critical-infrastructure assurance

Critical-function recovery exercise

Direct answer

Demonstrate clean restoration of minimum viable mission and safe functions under isolated, degraded, and compromise-assumed conditions.

Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.

Statement of work

Demonstrate clean restoration of minimum viable mission and safe functions under isolated, degraded, and compromise-assumed conditions.

Performance work statement
Current package IDWP-K07-07
Inherited stable IDWP-K06-07
PeriodTo be defined by the acquiring authority; no duration is inferred by the public pattern.
DependenciesWP-K06-05; WP-K06-06

Required outcomes

  • measured minimum-viable mission restoration
  • clean-room recovery evidence
  • reinfection and integrity checks
  • corrective-action register

Owner-furnished information

  • RTO/RPO objectives
  • known-good artifacts
  • backup and key inventories
  • dependency restoration order
  • incident command and evidence rules

Contractor deliverables

  • exercise plan
  • restoration chronology
  • evidence-preservation record
  • reinfection checks
  • lessons and corrective actions

Performance standards

  • RTO/RPO and safety objectives are directly observed
  • Recovered artifacts match approved hashes and compromise checks
  • Missed objectives remain recorded and propagate

Quality surveillance

  • timed exercise
  • independent verification
  • readiness graph test

Exclusions

  • no tabletop-only claim of operational recovery
  • no destruction of production evidence

Acceptance matrix

Measurable acceptance criteria
CriterionRequired resultAssessmentOutcome vocabulary
Measured restorationRTO/RPO and safety objectives are directly observedtimed exercisePASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale
Clean stateRecovered artifacts match approved hashes and compromise checksindependent verificationPASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale
Negative resultMissed objectives remain recorded and propagatereadiness graph testPASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale

Bid-evaluation criteria

  • recovery exercise leadership
  • forensic continuity
  • power/cooling/OT restoration experience
  • negative-result discipline
  • price realism and schedule credibility
  • data-rights and evidence-delivery terms
  • subcontractor and supply-chain transparency

Evidence rights

  • The acquiring authority receives perpetual access to final reports, schemas, manifests, acceptance evidence, defects, and correction history within the negotiated data-rights regime.
  • Contractor proprietary methods may remain protected only when they do not prevent independent replay of required results.
  • Source artifacts, hashes, versions, tool outputs, and negative findings required for acceptance cannot be withheld merely because they are unfavorable.
  • No clause transfers authority, licensing status, or ownership beyond the signed contract and governing law.

Negative-result clauses

  • A failed, partial, stale, disputed, unavailable, or superseded result must be delivered and may not be converted into a pass.
  • Discovery of a safety, authority, evidence, or common-cause defect triggers prompt notice and preserves stop authority.
  • Acceptance of one deliverable does not waive latent defects, falsified evidence, or later-discovered nonconformance.
  • The final package must distinguish work completed, work not performed, evidence unavailable, and owner decisions pending.

Data requirements

  • RTO/RPO objectives
  • known-good artifacts
  • backup and key inventories
  • dependency restoration order
  • incident command and evidence rules

Machine record

Inspect the complete JSON work package.