Recovery

Also written: recovery phase

The incident response phase after eradication, when systems are restored, for example from backup, and returned to normal use.

Where the book teaches it