Contingency Planning (CP)

Overview:The organization coordinates contingency plan testing with organizational elements responsible for related plans. Supplemental Guidance:Plans related to contingency plans for organizational information systems include, for example, Business... Read More

Overview:The organization identifies critical information system assets supporting essential missions and business functions. Supplemental Guidance:Organizations may choose to carry out the contingency planning activities in this control enhancement... Read More

Overview:The organization:a. Conducts backups of user-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives];b. Conducts backups of system-level... Read More

Overview:The organization provides for the recovery and reconstitution of the information system to a known state after a disruption, compromise, or failure. Supplemental Guidance:Recovery is executing information system contingency plan activities... Read More

Overview:The organization develops alternate processing site agreements that contain priority-of-service provisions in accordance with organizational availability requirements (including recovery time objectives). Supplemental Guidance:Priority-of... Read More

Overview:The organization:(a) Develops primary and alternate telecommunications service agreements that contain priority- of-service provisions in accordance with organizational availability requirements (including recovery time objectives); and(b)... Read More

Overview:The organization plans for the resumption of essential missions and business functions within [Assignment: organization-defined time period] of contingency plan activation. Supplemental Guidance:Organizations may choose to carry out the... Read More

Overview:The organization stores backup copies of [Assignment: organization-defined critical information system software and other security-related information] in a separate facility or in a fire-rated container that is not collocated with the... Read More

Overview:The organization identifies an alternate storage site that is separated from the primary storage site to reduce susceptibility to the same threats. Supplemental Guidance:Threats that affect alternate storage sites are typically defined in... Read More

Overview:The organization identifies an alternate processing site that is separated from the primary processing site to reduce susceptibility to the same threats. Supplemental Guidance:Threats that affect alternate processing sites are typically... Read More