# Pre-Approved Rollback Execution

Contingency-planning requirements for a rollback: pre-approval, target binding, and independent post-rollback reconciliation.

- A rollback procedure must be pre-approved and tested under contingency planning (CP) before it is ever executed; it is never improvised mid-incident.
- A rollback binds to the exact affected target and requires a captured before-state as a precondition to execution.
- The post-rollback state is reconciled against the expected result and verified independently of the executor.

## Sources

- https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
- https://www.nist.gov/cyberframework