CP-4(4): Full Recovery and Reconstitution
Control Family:
Parent Control:
Baselines:
(Not part of any baseline)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- CP-4(4): Full Recovery / Reconstitution
Control Statement
Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.
Supplemental Guidance
Recovery is executing contingency plan activities to restore organizational mission and business functions. Reconstitution takes place following recovery and includes activities for returning systems to fully operational states. Organizations establish a known state for systems that includes system state information for hardware, software programs, and data. Preserving system state information facilitates system restart and return to the operational mode of organizations with less disruption of mission and business processes.