Navigate

CP-10(4)

CP-10(4): Restore Within Time Period

Provide the capability to restore system components within [restoration time period within which to restore system components to a known, operational state is defined;] from configuration-controlled and integrity-protected information representing a known, operational state for the components.

Supplemental

Restoration of system components includes reimaging, which restores the components to known, operational states.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	high

Overlays
CDS - Access, CDS - Multilevel, CDS - Transfer

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CP-10(4).

Control	Description
CM-2	a: Develop, document, and maintain under configuration control, a current baseline configuration of the system; and b: Review and update the baseline configuration of the system: 1: [the frequency of baseline configuration review and update is defined;]; 2: When required due to [the circumstances requiring baseline configuration review and update are defined;] ; and 3: When system components are installed or upgraded.
CM-6	a: Establish and document configuration settings for components employed within the system that reflect the most restrictive mode consistent with operational requirements using [common secure configurations to establish and document configuration settings for components employed within the system are defined;]; b: Implement the configuration settings; c: Identify, document, and approve any deviations from established configuration settings for [system components for which approval of deviations is needed are defined;] based on [operational requirements necessitating approval of deviations are defined;] ; and d: Monitor and control changes to the configuration settings in accordance with organizational policies and procedures.

Control

Description

CM-2

a: Develop, document, and maintain under configuration control, a current baseline configuration of the system; and

b: Review and update the baseline configuration of the system:
- 1: [the frequency of baseline configuration review and update is defined;];
- 2: When required due to [the circumstances requiring baseline configuration review and update are defined;] ; and
- 3: When system components are installed or upgraded.

CM-6

a: Establish and document configuration settings for components employed within the system that reflect the most restrictive mode consistent with operational requirements using [common secure configurations to establish and document configuration settings for components employed within the system are defined;];

b: Implement the configuration settings;

c: Identify, document, and approve any deviations from established configuration settings for [system components for which approval of deviations is needed are defined;] based on [operational requirements necessitating approval of deviations are defined;] ; and

d: Monitor and control changes to the configuration settings in accordance with organizational policies and procedures.

Enhancements

The controls below (if any) add on to the requirements of CP-10(4).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CP-10(4).

CCI	Definition
CCI-000556	Defines restoration time periods within which to restore system components from configuration-controlled and integrity-protected information representing a known, operational state for the components.
CCI-000557	Provide the capability to restore information system components within organization-defined restoration time periods from configuration-controlled and integrity-protected information representing a known, operational state for the components.