CCI-000455

The organization develops a contingency plan for the information system that addresses maintaining essential business functions despite an information system failure.

Implementation Guidance

The organization being inspected/assessed must clearly and accurately document maintaining business functions despite an information system failure for its information system(s).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the contingency plan to ensure it clearly and accurately documents maintaining business functions despite an information system failure for its information system(s).

Compelling Evidence

1.) Signed and dated contingency plan, referencing business functions section

The controls below (if any) were marked by NIST as being related to CCI-000455.