Assessment Objective
Determine if:
- CP-04a.
- CP-04a.[01] the contingency plan for the system is tested [Assignment: frequency];
- CP-04a.[02] [Assignment: tests] are used to determine the effectiveness of the plan;
- CP-04a.[03] [Assignment: tests] are used to determine the readiness to execute the plan;
- CP-04b. the contingency plan test results are reviewed;
- CP-04c. corrective actions are initiated, if needed.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing contingency plan testing
- contingency plan
- contingency plan test documentation
- contingency plan test results
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for contingency plan testing, reviewing, or responding to contingency plan tests
- organizational personnel with information security responsibilities
Test
- Organizational processes for contingency plan testing
- mechanisms supporting the contingency plan and/or contingency plan testing
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | CP-04 Contingency Plan Testing |