|

controlCP-4

Contingency Plan Testing (CP-4)

Test the contingency plan for the system [organization-defined] using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: [organization-defined]. Review the contingency plan test results; and Initiate corrective actions, if needed.

Security Baselines

LOWMODERATEHIGH

contingencydisaster-recoverybusiness-continuity

Why These Connect

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports22

These related controls work together — a change to one may affect the others.

Enhances5

These enhancements add specific capabilities or refinements to the base control.

Related Controls(15)

CP-2Contingency Plan (CP-2)

CP-3Contingency Training (CP-3)

AT-3Role-based Training (AT-3)

CP-8Telecommunications Services (CP-8)

CP-9System Backup (CP-9)

IR-3Incident Response Testing (IR-3)

IR-4Incident Handling (IR-4)

PL-2System Security and Privacy Plans (PL-2)

PM-14Testing, Training, and Monitoring (PM-14)SR-2Supply Chain Risk Management Plan (SR-2)

CP-10System Recovery and Reconstitution (CP-10)

IR-8Incident Response Plan (IR-8)

PM-8Critical Infrastructure Plan (PM-8)SA-24Design For Cyber Resiliency (SA-24)SC-24Fail in Known State (SC-24)

Control Enhancements(5)

CP-4(1)Coordinate with Related Plans (CP-4(1))

CP-4(2)Alternate Processing Site (CP-4(2))

CP-4(3)Automated Testing (CP-4(3))

CP-4(4)Full Recovery and Reconstitution (CP-4(4))

CP-4(5)Self-challenge (CP-4(5))

See Also

@SP 800-53 Overview ⚖Compare Baselines