CCI-000449

Develop a contingency plan for the system that addresses contingency roles, responsibilities, assigned individuals with contact information.

Implementation Guidance

The organization being inspected/assessed must clearly and accurately document contingency roles, responsibilities, assigned individuals with contact information for its information system(s).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the contingency plan to ensure it clearly and accurately documents contingency roles, responsibilities, assigned individuals with contact information for its information system(s).

Compelling Evidence

1.) Signed and dated contingency plan, referencing contingency roles, responsibilities, assigned individuals with contact information section

The controls below (if any) were marked by NIST as being related to CCI-000449.