CP-2(4): Resume All Missions / Business Functions

Control Family:

Contingency Planning

Parent Control:

CP-2: Contingency Plan

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.AM-5
ID.AM-6
ID.BE-1
ID.BE-5
ID.SC-5
PR.DS-4
PR.IP-7
PR.IP-9
DE.AE-4
RS.AN-2
RS.AN-4
RS.CO-1
RS.CO-3
RS.CO-4
RS.IM-1
RS.IM-2
RS.RP-1
RC.CO-3
RC.IM-1
RC.IM-2

Baselines:

High

Control is withdrawn in the next version of this control set and incorporated into: CP-2(3): Resume Mission and Business Functions.

Control Statement

The organization plans for the resumption of all missions and business functions within [Assignment: organization-defined time period] of contingency plan activation.

Supplemental Guidance

Organizations may choose to carry out the contingency planning activities in this control enhancement as part of organizational business continuity planning including, for example, as part of business impact analyses. The time period for resumption of all missions/business functions may be dependent on the severity/extent of disruptions to the information system and its supporting infrastructure.