Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC
Home / Frameworks / FedRAMP Rev 5 / CP — Contingency Planning

CP Contingency Planning

35 controls in the Contingency Planning family

CP-1Policy and Procedures
LI-SaaS
LOW
MODERATE
HIGH
CP-2Contingency Plan
LI-SaaS
LOW
MODERATE
HIGH
CP-2 (01)Contingency Plan | Coordinate with Related Plans
MODERATE
HIGH
CP-2 (02)Contingency Plan | Capacity Planning
HIGH
CP-2 (03)Contingency Plan | Resume Mission and Business Functions
MODERATE
HIGH
CP-2 (05)Contingency Plan | Continue Mission and Business Functions
HIGH
CP-2 (08)Contingency Plan | Identify Critical Assets
MODERATE
HIGH
CP-3Contingency Training
LI-SaaS
LOW
MODERATE
HIGH
CP-3 (01)Contingency Training | Simulated Events
HIGH
CP-4Contingency Plan Testing
LI-SaaS
LOW
MODERATE
HIGH
CP-4 (01)Contingency Plan Testing | Coordinate with Related Plans
MODERATE
HIGH
CP-4 (02)Contingency Plan Testing | Alternate Processing Site
HIGH
CP-6Alternate Storage Site
MODERATE
HIGH
CP-6 (01)Alternate Storage Site | Separation from Primary Site
MODERATE
HIGH
CP-6 (02)Alternate Storage Site | Recovery Time and Recovery Point Objectives
HIGH
CP-6 (03)Alternate Storage Site | Accessibility
MODERATE
HIGH
CP-7Alternate Processing Site
MODERATE
HIGH
CP-7 (01)Alternate Processing Site | Separation from Primary Site
MODERATE
HIGH
CP-7 (02)Alternate Processing Site | Accessibility
MODERATE
HIGH
CP-7 (03)Alternate Processing Site | Priority of Service
MODERATE
HIGH
CP-7 (04)Alternate Processing Site | Preparation for Use
HIGH
CP-8Telecommunications Services
MODERATE
HIGH
CP-8 (01)Telecommunications Services | Priority of Service Provisions
MODERATE
HIGH
CP-8 (02)Telecommunications Services | Single Points of Failure
MODERATE
HIGH
CP-8 (03)Telecommunications Services | Separation of Primary and Alternate Providers
HIGH
CP-8 (04)Telecommunications Services | Provider Contingency Plan
HIGH
CP-9System Backup
LI-SaaS
LOW
MODERATE
HIGH
CP-9 (01)System Backup | Testing for Reliability and Integrity
MODERATE
HIGH
CP-9 (02)System Backup | Test Restoration Using Sampling
HIGH
CP-9 (03)System Backup | Separate Storage for Critical Information
HIGH
CP-9 (05)System Backup | Transfer to Alternate Storage Site
HIGH
CP-9 (08)System Backup | Cryptographic Protection
MODERATE
HIGH
CP-10System Recovery and Reconstitution
LI-SaaS
LOW
MODERATE
HIGH
CP-10 (02)System Recovery and Reconstitution | Transaction Recovery
MODERATE
HIGH
CP-10 (04)System Recovery and Reconstitution | Restore Within Time Period
HIGH