CP-2(7): Coordinate With External Service Providers

Control Family:

Contingency Planning

Parent Control:

CP-2: Contingency Plan

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.AM-5
ID.AM-6
ID.BE-1
ID.BE-5
ID.SC-5
PR.DS-4
PR.IP-7
PR.IP-9
DE.AE-4
RS.AN-2
RS.AN-4
RS.CO-1
RS.CO-3
RS.CO-4
RS.IM-1
RS.IM-2
RS.RP-1
RC.CO-3
RC.IM-1
RC.IM-2

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
CP-2(7): Coordinate with External Service Providers

Control Statement

The organization coordinates its contingency plan with the contingency plans of external service providers to ensure that contingency requirements can be satisfied.

Supplemental Guidance

When the capability of an organization to successfully carry out its core missions/business functions is dependent on external service providers, developing a timely and comprehensive contingency plan may become more challenging. In this situation, organizations coordinate contingency planning activities with the external entities to ensure that the individual plans reflect the overall contingency needs of the organization.