controlCP-13

Alternative Security Mechanisms (CP-13)

Employ [organization-defined] for satisfying [organization-defined] when the primary means of implementing the security function is unavailable or compromised.

contingencydisaster-recoverybusiness-continuity

Why These Connect

Maps To1

These are equivalent or closely aligned requirements in other frameworks.

Supports9

These related controls work together — a change to one may affect the others.

Related Controls(5)

CP-2Contingency Plan (CP-2)

LMH

CP-11Alternate Communications Protocols (CP-11)SI-13Predictable Failure Prevention (SI-13)SA-24Design For Cyber Resiliency (SA-24)SI-17Fail-safe Procedures (SI-17)

Cross-Framework Mappings(1)

ISO 27001ISO/IEC 27001:20221 mappingFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

Organization-Defined Parameters(2)

Assignmentorganization-defined alternative or supplemental security mechanisms

Assignmentorganization-defined security functions