+CP-04(04) Full Recovery and Reconstitution

CP-04(04) Full Recovery and Reconstitution

Control

Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Discussion

Recovery is executing contingency plan activities to restore organizational mission and business functions. Reconstitution takes place following recovery and includes activities for returning systems to fully operational states. Organizations establish a known state for systems that includes system state information for hardware, software programs, and data. Preserving system state information facilitates system restart and return to the operational mode of organizations with less disruption of mission and business processes.

Assessment Objective

  1. a full recovery of the system to a known state is included as part of contingency plan testing;
  2. a full reconstitution of the system to a known state is included as part of contingency plan testing.

Assessment Method

Examine

Contingency planning policy procedures addressing system recovery and reconstitution contingency plan contingency plan test documentation contingency plan test results system security plan other relevant documents or records

Interview

Organizational personnel with contingency plan testing responsibilities organizational personnel with system recovery and reconstitution responsibilities organizational personnel with information security responsibilities

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by CP-04(04) Full Recovery and Reconstitution – Assessment Procedure