CP-4(4)

CP-4(4): Full Recovery / Reconstitution

The organization includes a full recovery and reconstitution of the information system to a known state as part of contingency plan testing.

Overlays
None

CSF Categories
None

The controls below (if any) were marked by NIST as being related to CP-4(4).

Control	Description
CP-10	The organization provides for the recovery and reconstitution of the information system to a known state after a disruption, compromise, or failure.
SC-24	The information system fails to a [organization-defined known-state] for [organization-defined types of failures] preserving [organization-defined system state information] in failure.

The controls below (if any) add on to the requirements of CP-4(4).

Control	Description
No controls

The CCIs below are tied to CP-4(4).

CCI	Definition
CCI-000504	Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.