CCI-000452

The organization develops a contingency plan for the information system that addresses maintaining essential missions despite an information system compromise.

Implementation Guidance

The organization being inspected/assessed must clearly and accurately document maintaining essential missions despite an information system compromise for its information system(s).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the contingency plan to ensure it clearly and accurately documents maintaining essential missions despite an information system compromise for its information system(s).

Compelling Evidence

1.) Signed and dated contingency plan, referencing essential missions functions section

The controls below (if any) were marked by NIST as being related to CCI-000452.