CCI-002842

Review provider contingency plans to ensure that the plans meet organizational contingency requirements.

Implementation Guidance

Determine if provider contingency plans are reviewed to ensure that the plans meet Organizational contingency requirements.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing primary and alternate telecommunications services; contingency plan; provider contingency plans; evidence of contingency testing/training by providers; primary and alternate telecommunications service agreements; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with contingency planning, plan implementation, and testing responsibilities; primary and alternate telecommunications service providers; organizational personnel with information security responsibilities; organizational personnel with responsibility for acquisitions/contractual agreements].

The controls below (if any) were marked by NIST as being related to CCI-002842.