ComplianceNIST 800-53 control

NIST-CP-4 Contingency Plan Testing

Official page ↗

Framework: NIST SP 800-53 rev5 (5.2.0)
Family: CP Contingency Planning
Control: CP-4

Control statement

a. Test the contingency plan for the system [Assignment: frequency] using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: [Assignment: organization-defined tests]. b. Review the contingency plan test results; and c. Initiate corrective actions, if needed.

Discussion

Methods for testing contingency plans to determine the effectiveness of the plans and identify potential weaknesses include checklists, walk-through and tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises. Organizations conduct testing based on the requirements in contingency plans and include a determination of the effects on organizational operations, assets, and individuals due to contingency operations. Organizations have flexibility and discretion in the breadth, depth, and timelines of corrective actions.

Related control · Compliance (10)

NIST-AT-3 Role-based Training NIST 800-53 control
NIST-CP-2 Contingency Plan NIST 800-53 control
NIST-CP-3 Contingency Training NIST 800-53 control
NIST-CP-8 Telecommunications Services NIST 800-53 control
NIST-CP-9 System Backup NIST 800-53 control
NIST-IR-3 Incident Response Testing NIST 800-53 control
NIST-IR-4 Incident Handling NIST 800-53 control
NIST-PL-2 System Security and Privacy Plans NIST 800-53 control
NIST-PM-14 Testing, Training, and Monitoring NIST 800-53 control
NIST-SR-2 Supply Chain Risk Management Plan NIST 800-53 control

Referenced by Compliance · enhancement of (5)

NIST-CP-4(1) Coordinate with Related Plans NIST 800-53 enhancement
NIST-CP-4(2) Alternate Processing Site NIST 800-53 enhancement
NIST-CP-4(3) Automated Testing NIST 800-53 enhancement
NIST-CP-4(4) Full Recovery and Reconstitution NIST 800-53 enhancement
NIST-CP-4(5) Self-challenge NIST 800-53 enhancement

Referenced by Compliance · has member (1)

NIST-CP Contingency Planning NIST 800-53 family

Referenced by Compliance · related control (17)

NIST-AT-2(1) Practical Exercises NIST 800-53 enhancement
NIST-CP-10 System Recovery and Reconstitution NIST 800-53 control
NIST-CP-2 Contingency Plan NIST 800-53 control
NIST-CP-3 Contingency Training NIST 800-53 control
NIST-CP-7(4) Preparation for Use NIST 800-53 enhancement
NIST-CP-8(4) Provider Contingency Plan NIST 800-53 enhancement
NIST-CP-9(1) Testing for Reliability and Integrity NIST 800-53 enhancement
NIST-CP-9(2) Test Restoration Using Sampling NIST 800-53 enhancement
NIST-IR-3 Incident Response Testing NIST 800-53 control
NIST-IR-4 Incident Handling NIST 800-53 control
NIST-IR-8 Incident Response Plan NIST 800-53 control
NIST-PL-2 System Security and Privacy Plans NIST 800-53 control
NIST-PM-14 Testing, Training, and Monitoring NIST 800-53 control
NIST-PM-8 Critical Infrastructure Plan NIST 800-53 control
NIST-SA-24 Design For Cyber Resiliency NIST 800-53 control
NIST-SC-24 Fail in Known State NIST 800-53 control
NIST-SR-2 Supply Chain Risk Management Plan NIST 800-53 control