K07 · evidence-bundled critical-infrastructure assurance
Critical-function recovery exercise
Direct answer
Demonstrate clean restoration of minimum viable mission and safe functions under isolated, degraded, and compromise-assumed conditions.
Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.
Statement of work
Demonstrate clean restoration of minimum viable mission and safe functions under isolated, degraded, and compromise-assumed conditions.
| Current package ID | WP-K07-07 |
|---|---|
| Inherited stable ID | WP-K06-07 |
| Period | To be defined by the acquiring authority; no duration is inferred by the public pattern. |
| Dependencies | WP-K06-05; WP-K06-06 |
Required outcomes
- measured minimum-viable mission restoration
- clean-room recovery evidence
- reinfection and integrity checks
- corrective-action register
Owner-furnished information
- RTO/RPO objectives
- known-good artifacts
- backup and key inventories
- dependency restoration order
- incident command and evidence rules
Contractor deliverables
- exercise plan
- restoration chronology
- evidence-preservation record
- reinfection checks
- lessons and corrective actions
Performance standards
- RTO/RPO and safety objectives are directly observed
- Recovered artifacts match approved hashes and compromise checks
- Missed objectives remain recorded and propagate
Quality surveillance
- timed exercise
- independent verification
- readiness graph test
Exclusions
- no tabletop-only claim of operational recovery
- no destruction of production evidence
Acceptance matrix
| Criterion | Required result | Assessment | Outcome vocabulary |
|---|---|---|---|
| Measured restoration | RTO/RPO and safety objectives are directly observed | timed exercise | PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale |
| Clean state | Recovered artifacts match approved hashes and compromise checks | independent verification | PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale |
| Negative result | Missed objectives remain recorded and propagate | readiness graph test | PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale |
Bid-evaluation criteria
- recovery exercise leadership
- forensic continuity
- power/cooling/OT restoration experience
- negative-result discipline
- price realism and schedule credibility
- data-rights and evidence-delivery terms
- subcontractor and supply-chain transparency
Evidence rights
- The acquiring authority receives perpetual access to final reports, schemas, manifests, acceptance evidence, defects, and correction history within the negotiated data-rights regime.
- Contractor proprietary methods may remain protected only when they do not prevent independent replay of required results.
- Source artifacts, hashes, versions, tool outputs, and negative findings required for acceptance cannot be withheld merely because they are unfavorable.
- No clause transfers authority, licensing status, or ownership beyond the signed contract and governing law.
Negative-result clauses
- A failed, partial, stale, disputed, unavailable, or superseded result must be delivered and may not be converted into a pass.
- Discovery of a safety, authority, evidence, or common-cause defect triggers prompt notice and preserves stop authority.
- Acceptance of one deliverable does not waive latent defects, falsified evidence, or later-discovered nonconformance.
- The final package must distinguish work completed, work not performed, evidence unavailable, and owner decisions pending.
Data requirements
- RTO/RPO objectives
- known-good artifacts
- backup and key inventories
- dependency restoration order
- incident command and evidence rules