CP-2(3): Resume Essential Missions / Business Functions

Control Family:

Contingency Planning

Parent Control:

CP-2: Contingency Plan

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.AM-5
ID.AM-6
ID.BE-1
ID.BE-5
ID.SC-5
PR.DS-4
PR.IP-7
PR.IP-9
DE.AE-4
RS.AN-2
RS.AN-4
RS.CO-1
RS.CO-3
RS.CO-4
RS.IM-1
RS.IM-2
RS.RP-1
RC.CO-3
RC.IM-1
RC.IM-2

Threats Addressed:

Denial of Service

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
CP-2(3): Resume Mission and Business Functions

Control Statement

The organization plans for the resumption of essential missions and business functions within [Assignment: organization-defined time period] of contingency plan activation.

Supplemental Guidance

Organizations may choose to carry out the contingency planning activities in this control enhancement as part of organizational business continuity planning including, for example, as part of business impact analyses. The time period for resumption of essential missions/business functions may be dependent on the severity/extent of disruptions to the information system and its supporting infrastructure.