Wrong claim
Why it feels true
The 02:00 copy finished, so the warehouse looks recoverable.
Precise correction
NIST CSF 2.0 (CSWP 29, final 26 February 2024) describes Recover as restoring assets and operations affected by a cybersecurity incident.
That is an outcome, not a file share.
A nightly copy the YardOS service account can overwrite is a second victim of the same ransomware. A restore plan names a copy that account cannot change, who may restore it, and the last test that actually brought YardOS back.
NIST CSWP 29: The NIST Cybersecurity Framework (CSF) 2.0, final 2024-02-26 ↗