Skip to Content

Coordinate with Related Plans CP-4(1)

Overview:
The organization coordinates contingency plan testing with organizational elements responsible for related plans.


Supplemental Guidance:
Plans related to contingency plans for organizational information systems include, for example, Business Continuity Plans, Disaster Recovery Plans, Continuity of Operations Plans, Crisis Communications Plans, Critical Infrastructure Plans, Cyber Incident Response Plans, and Occupant Emergency Plans. This control enhancement does not require organizations to create organizational elements to handle related plans or to align such elements with specific plans. It does require, however, that if such organizational elements are responsible for related plans, organizations should coordinate with those elements.

Related controls: IR-8, PM-8.


Action Items:
1) Ensure contingency plans are regularly tested in coordination with related plans

 

Related Documents:
1) Contingency Plan Policy

2) Business Continuity Plans

3) Incident Response Plan

4) Disaster Recovery Plan


Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
none


Moderate Additional FedRAMP Requirements and Guidance
none