CCI-000453

The organization develops a contingency plan for the information system that addresses maintaining essential business functions despite an information system compromise.

Implementation Guidance

The organization being inspected/assessed must clearly and accurately document maintaining business functions despite an information system compromise for its information system(s).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the contingency plan to ensure it clearly and accurately documents maintaining business functions despite an information system compromise for its information system(s).

Compelling Evidence

1.) Signed and dated contingency plan, referencing business functions section

The controls below (if any) were marked by NIST as being related to CCI-000453.