CCI-000504

Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Implementation Guidance

Determine if: - a full recovery of the system to a known state is included as part of contingency plan testing. - a full reconstitution of the system to a known state is included as part of contingency plan testing.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing system recovery and reconstitution; contingency plan; contingency plan test documentation; contingency plan test results; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with contingency plan testing responsibilities; organizational personnel with system recovery and reconstitution responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for contingency plan testing; mechanisms supporting contingency plan testing; mechanisms supporting recovery and reconstitution of the system].

The controls below (if any) were marked by NIST as being related to CCI-000504.