CP — Contingency Planning
56 controls in the Contingency Planning family
CP-1Policy And Procedures
LOW
MODERATE
HIGH
CP-2Contingency Plan
LOW
MODERATE
HIGH
CP-2(1)Coordinate With Related Plans
MODERATE
HIGH
CP-2(2)Capacity Planning
HIGH
CP-2(3)Resume Mission And Business Functions
MODERATE
HIGH
CP-2(4)Resume All Mission And Business Functions
CP-2(5)Continue Mission And Business Functions
HIGH
CP-2(6)Alternate Processing And Storage Sites
CP-2(7)Coordinate With External Service Providers
CP-2(8)Identify Critical Assets
MODERATE
HIGH
CP-3Contingency Training
LOW
MODERATE
HIGH
CP-3(1)Simulated Events
HIGH
CP-3(2)Mechanisms Used In Training Environments
CP-4Contingency Plan Testing
LOW
MODERATE
HIGH
CP-4(1)Coordinate With Related Plans
MODERATE
HIGH
CP-4(2)Alternate Processing Site
HIGH
CP-4(3)Automated Testing
CP-4(4)Full Recovery And Reconstitution
CP-4(5)Self-Challenge
CP-5Contingency Plan Update
CP-6Alternate Storage Site
MODERATE
HIGH
CP-6(1)Separation From Primary Site
MODERATE
HIGH
CP-6(2)Recovery Time And Recovery Point Objectives
HIGH
CP-6(3)Accessibility
MODERATE
HIGH
CP-7Alternate Processing Site
MODERATE
HIGH
CP-7(1)Separation From Primary Site
MODERATE
HIGH
CP-7(2)Accessibility
MODERATE
HIGH
CP-7(3)Priority Of Service
MODERATE
HIGH
CP-7(4)Preparation For Use
HIGH
CP-7(5)Equivalent Information Security Safeguards
CP-7(6)Inability To Return To Primary Site
CP-8Telecommunications Services
MODERATE
HIGH
CP-8(1)Priority Of Service Provisions
MODERATE
HIGH
CP-8(2)Single Points Of Failure
MODERATE
HIGH
CP-8(3)Separation Of Primary And Alternate Providers
HIGH
CP-8(4)Provider Contingency Plan
HIGH
CP-8(5)Alternate Telecommunication Service Testing
CP-9System Backup
LOW
MODERATE
HIGH
CP-9(1)Testing For Reliability And Integrity
MODERATE
HIGH
CP-9(2)Test Restoration Using Sampling
HIGH
CP-9(3)Separate Storage For Critical Information
HIGH
CP-9(4)Protection From Unauthorized Modification
CP-9(5)Transfer To Alternate Storage Site
HIGH
CP-9(6)Redundant Secondary System
CP-9(7)Dual Authorization For Deletion Or Destruction
CP-9(8)Cryptographic Protection
MODERATE
HIGH
CP-10System Recovery And Reconstitution
LOW
MODERATE
HIGH
CP-10(1)Contingency Plan Testing
CP-10(2)Transaction Recovery
MODERATE
HIGH
CP-10(3)Compensating Security Controls
CP-10(4)Restore Within Time Period
HIGH
CP-10(5)Failover Capability
CP-10(6)Component Protection
CP-11Alternate Communications Protocols
CP-12Safe Mode
CP-13Alternative Security Mechanisms