Assessment Objective
Determine if:
- CP-04(04)[01] a full recovery of the system to a known state is included as part of contingency plan testing;
- CP-04(04)[02] a full reconstitution of the system to a known state is included as part of contingency plan testing.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system recovery and reconstitution
- contingency plan
- contingency plan test documentation
- contingency plan test results
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency plan testing responsibilities
- organizational personnel with system recovery and reconstitution responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for contingency plan testing
- mechanisms supporting contingency plan testing
- mechanisms supporting recovery and reconstitution of the system
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | CP-04(04) Full Recovery and Reconstitution |