NIST 800-53 Rev. 5

AC
AT
AU
CA
CM
CP
IA
IR
MA
MP
PE
PL
PM
PS
PT
RA
SA
SC
SI
SR
CP-1
CP-2
CP-2(1)
CP-2(2)
CP-2(3)
CP-10(1)
CP-2(5)
CP-2(6)
CP-2(7)
CP-2(8)
CP-3
CP-3(1)
CP-3(2)
CP-4
CP-4(1)
CP-4(2)
CP-4(3)
CP-4(4)
CP-4(5)
CP-10(3)
CP-6
CP-6(1)
CP-6(2)
CP-6(3)
CP-7
CP-7(1)
CP-7(2)
CP-7(3)
CP-7(4)
CP-10(5)
CP-7(6)
CP-8
CP-8(1)
CP-8(2)
CP-8(3)
CP-8(4)
CP-8(5)
CP-9
CP-9(1)
CP-9(2)
CP-9(3)
CP-2(4)
CP-9(5)
CP-9(6)
CP-9(7)
CP-9(8)
CP-10
CP-5
CP-10(2)
CP-7(5)
CP-10(4)
CP-9(4)
CP-10(6)
CP-11
CP-12
CP-13

CP-4: Contingency Plan Testing

Control Text:

a. Test the contingency plan for the system [Assignment: organization-defined frequency] using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: [Assignment: organization-defined tests]. b. Review the contingency plan test results; and c. Initiate corrective actions, if needed.

Methods for testing contingency plans to determine the effectiveness of the plans and identify potential weaknesses include checklists, walk-through and tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises. Organizations conduct testing based on the requirements in contingency plans and include a determination of the effects on organizational operations, assets, and individuals due to contingency operations. Organizations have flexibility and discretion in the breadth, depth, and timelines of corrective actions.

Related Controls