CCI-002857

The organization defines the restrictions of the safe mode of operation that the information system will enter when organization-defined conditions are detected.

Implementation Guidance

The organization being inspected/assessed defines and documents the restrictions of safe mode of operation that the information system will enter when organization-defined conditions are detected. DoD has determined the restrictions on safe mode of operation are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented restrictions to ensure the organization being inspected/assessed defines the restrictions of safe mode of operation that the information system will enter when organization-defined conditions are detected. DoD has determined the restrictions on safe mode of operation are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated contingency plan, referencing safe mode of operation section

The controls below (if any) were marked by NIST as being related to CCI-002857.