Assessment Objective
Determine if:
- CP-10(04) the capability to restore system components within [Assignment: restoration time periods] from configuration-controlled and integrity-protected information representing a known, operational state for the components is provided.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system recovery and reconstitution
- contingency plan
- system design documentation
- system configuration settings and associated documentation
- contingency plan test documentation
- contingency plan test results
- evidence of system recovery and reconstitution operations
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system recovery and reconstitution responsibilities
- organizational personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing the recovery/reconstitution of system information
Saincheisteanna nasctha
| Cineál naisc | Saincheist |
|---|---|
| blocks | CP-10(04) Restore Within Time Period |