CCI-000476

Plan for the resumption of all or essential business functions within the organization-defined time period of contingency plan activation.

Implementation Guidance

Determine if the resumption of [CP-02(03)_ODP[01]; one of the following PARAMETER VALUES is selected: {all; essential}] mission and business functions are planned for within [CP-02(03)_ODP[02]; the contingency plan activation time period within which to resume mission and business functions is defined] of contingency plan activation.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing contingency operations for the system; contingency plan; business impact assessment; system security plan; privacy plan; other related plans; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with contingency planning and plan implementation responsibilities; organizational personnel with information security and privacy responsibilities; organizational personnel with knowledge of requirements for mission and business functions]. Test: [SELECT FROM: Organizational processes for resumption of missions and business functions].

The controls below (if any) were marked by NIST as being related to CCI-000476.