CP-4(3): Automated Testing

Control Family:

Contingency Planning

Parent Control:

CP-4: Contingency Plan Testing

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

ID.SC-5
PR.IP-4
PR.IP-10

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
CP-4(3): Automated Testing

Control Statement

The organization employs automated mechanisms to more thoroughly and effectively test the contingency plan.

Supplemental Guidance

Automated mechanisms provide more thorough and effective testing of contingency plans, for example: (i) by providing more complete coverage of contingency issues; (ii) by selecting more realistic test scenarios and environments; and (iii) by effectively stressing the information system and supported missions.