The organization: a. Develops, documents, and disseminates to {{ insert: param, cp-1_prm_1 }}: 1. A contingency planning policy that addresses purpose, scope, roles, responsibilities, managem...

The organization: a. Develops a contingency plan for the information system that: 1. Identifies essential missions and business functions and associated contingency requirements; 2. Provi...

The organization coordinates contingency plan development with organizational elements responsible for related plans.

The organization conducts capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.

The organization plans for the resumption of essential missions and business functions within {{ insert: param, cp-2.3_prm_1 }} of contingency plan activation.

The organization plans for the resumption of all missions and business functions within {{ insert: param, cp-2.4_prm_1 }} of contingency plan activation.

The organization plans for the continuance of essential missions and business functions with little or no loss of operational continuity and sustains that continuity until full information system r...

The organization plans for the transfer of essential missions and business functions to alternate processing and/or storage sites with little or no loss of operational continuity and sustains that ...

The organization coordinates its contingency plan with the contingency plans of external service providers to ensure that contingency requirements can be satisfied.

The organization identifies critical information system assets supporting essential missions and business functions.

The organization provides contingency training to information system users consistent with assigned roles and responsibilities: a. Within {{ insert: param, cp-3_prm_1 }} of assuming a contingency...

The organization incorporates simulated events into contingency training to facilitate effective response by personnel in crisis situations.

The organization employs automated mechanisms to provide a more thorough and realistic contingency training environment.

The organization: a. Tests the contingency plan for the information system {{ insert: param, cp-4_prm_1 }} using {{ insert: param, cp-4_prm_2 }} to determine the effectiveness of the plan and the...

The organization coordinates contingency plan testing with organizational elements responsible for related plans.

The organization tests the contingency plan at the alternate processing site: (a) To familiarize contingency personnel with the facility and available resources; and (b) To evaluate the capabil...

The organization employs automated mechanisms to more thoroughly and effectively test the contingency plan.

The organization includes a full recovery and reconstitution of the information system to a known state as part of contingency plan testing.

The organization: a. Establishes an alternate storage site including necessary agreements to permit the storage and retrieval of information system backup information; and b. Ensures that the a...

The organization identifies an alternate storage site that is separated from the primary storage site to reduce susceptibility to the same threats.

The organization configures the alternate storage site to facilitate recovery operations in accordance with recovery time and recovery point objectives.

The organization identifies potential accessibility problems to the alternate storage site in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.

The organization: a. Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of {{ insert: param, cp-7_prm_1 }} for essential missions/busine...

The organization identifies an alternate processing site that is separated from the primary processing site to reduce susceptibility to the same threats.

The organization identifies potential accessibility problems to the alternate processing site in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.

The organization develops alternate processing site agreements that contain priority-of-service provisions in accordance with organizational availability requirements (including recovery time objec...

The organization prepares the alternate processing site so that the site is ready to be used as the operational site supporting essential missions and business functions.

The organization plans and prepares for circumstances that preclude returning to the primary processing site.

The organization establishes alternate telecommunications services including necessary agreements to permit the resumption of {{ insert: param, cp-8_prm_1 }} for essential missions and business fun...

The organization: (a) Develops primary and alternate telecommunications service agreements that contain priority-of-service provisions in accordance with organizational availability requirements ...

The organization obtains alternate telecommunications services to reduce the likelihood of sharing a single point of failure with primary telecommunications services.

The organization obtains alternate telecommunications services from providers that are separated from primary service providers to reduce susceptibility to the same threats.

The organization: (a) Requires primary and alternate telecommunications service providers to have contingency plans; (b) Reviews provider contingency plans to ensure that the plans meet organiz...

The organization tests alternate telecommunication services {{ insert: param, cp-8.5_prm_1 }}.

The organization: a. Conducts backups of user-level information contained in the information system {{ insert: param, cp-9_prm_1 }}; b. Conducts backups of system-level information contained in...

The organization tests backup information {{ insert: param, cp-9.1_prm_1 }} to verify media reliability and information integrity.

The organization uses a sample of backup information in the restoration of selected information system functions as part of contingency plan testing.

The organization stores backup copies of {{ insert: param, cp-9.3_prm_1 }} in a separate facility or in a fire-rated container that is not collocated with the operational system.

The organization transfers information system backup information to the alternate storage site {{ insert: param, cp-9.5_prm_1 }}.

The organization accomplishes information system backup by maintaining a redundant secondary system that is not collocated with the primary system and that can be activated without loss of informat...

The organization enforces dual authorization for the deletion or destruction of {{ insert: param, cp-9.7_prm_1 }}.

The organization provides for the recovery and reconstitution of the information system to a known state after a disruption, compromise, or failure.

The information system implements transaction recovery for systems that are transaction-based.

The organization provides the capability to restore information system components within {{ insert: param, cp-10.4_prm_1 }} from configuration-controlled and integrity-protected information represe...

The organization protects backup and restoration hardware, firmware, and software.

The information system provides the capability to employ {{ insert: param, cp-11_prm_1 }} in support of maintaining continuity of operations.

The information system, when {{ insert: param, cp-12_prm_1 }} are detected, enters a safe mode of operation with {{ insert: param, cp-12_prm_2 }}.

The organization employs {{ insert: param, cp-13_prm_1 }} for satisfying {{ insert: param, cp-13_prm_2 }} when the primary means of implementing the security function is unavailable or compromised.