CCI-000504

Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Implementation Guidance

The organization being inspected/assessed demonstrates full recovery and reconstitution of its information system to a known state as part of its contingency plan testing. The organization documents full recovery and reconstitution as part of its contingency plan testing results.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the full recovery and reconstitution procedures and contingency plan testing results to ensure all tests were performed IAW CP-2, CCIs 446 and 447.

Compelling Evidence

1.) Signed and dated copy of Disaster recovery plan 2.)

The controls below (if any) were marked by NIST as being related to CCI-000504.