CP-9(2): Test Restoration Using Sampling

Control Family:

Contingency Planning

Parent Control:

CP-9: System Backup

CSF v1.1 References:

CSF v2.0 References:

Threats Addressed:

Baselines:

  • High

Previous Version:

Control Statement

Use a sample of backup information in the restoration of selected system functions as part of contingency plan testing.

Supplemental Guidance

Organizations need assurance that system functions can be restored correctly and can support established organizational missions. To ensure that the selected system functions are thoroughly exercised during contingency plan testing, a sample of backup information is retrieved to determine whether the functions are operating as intended. Organizations can determine the sample size for the functions and backup information based on the level of assurance needed.