NIST 800-53 Rev. 5

CP-4(4): Contingency Plan Testing | Full Recovery and Reconstitution

Control Text:

Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Recovery is executing contingency plan activities to restore organizational mission and business functions. Reconstitution takes place following recovery and includes activities for returning systems to fully operational states. Organizations establish a known state for systems that includes system state information for hardware, software programs, and data. Preserving system state information facilitates system restart and return to the operational mode of organizations with less disruption of mission and business processes.

Related Controls