a. Develop, document, and disseminate to {{ insert: param, cp-1_prm_1 }}: 1. {{ insert: param, cp-01_odp.03 }} contingency planning policy that: (a) Addresses purpose, scope, roles, res...

a. Develop a contingency plan for the system that: 1. Identifies essential mission and business functions and associated contingency requirements; 2. Provides recovery objectives, restora...

Coordinate contingency plan development with organizational elements responsible for related plans.

Conduct capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.

Plan for the resumption of {{ insert: param, cp-02.03_odp.01 }} mission and business functions within {{ insert: param, cp-02.03_odp.02 }} of contingency plan activation.

Plan for the continuance of {{ insert: param, cp-02.05_odp }} mission and business functions with minimal or no loss of operational continuity and sustains that continuity until full system restora...

Plan for the transfer of {{ insert: param, cp-02.06_odp }} mission and business functions to alternate processing and/or storage sites with minimal or no loss of operational continuity and sustain ...

Coordinate the contingency plan with the contingency plans of external service providers to ensure that contingency requirements can be satisfied.

Identify critical system assets supporting {{ insert: param, cp-02.08_odp }} mission and business functions.

a. Provide contingency training to system users consistent with assigned roles and responsibilities: 1. Within {{ insert: param, cp-03_odp.01 }} of assuming a contingency role or responsibili...

Incorporate simulated events into contingency training to facilitate effective response by personnel in crisis situations.

Employ mechanisms used in operations to provide a more thorough and realistic contingency training environment.

a. Test the contingency plan for the system {{ insert: param, cp-04_odp.01 }} using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: {{ insert...

Coordinate contingency plan testing with organizational elements responsible for related plans.

Test the contingency plan at the alternate processing site: (a) To familiarize contingency personnel with the facility and available resources; and (b) To evaluate the capabilities of the alter...

Test the contingency plan using {{ insert: param, cp-04.03_odp }}.

Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Employ {{ insert: param, cp-04.05_odp.01 }} to {{ insert: param, cp-04.05_odp.02 }} to disrupt and adversely affect the system or system component.

a. Establish an alternate storage site, including necessary agreements to permit the storage and retrieval of system backup information; and b. Ensure that the alternate storage site provides c...

Identify an alternate storage site that is sufficiently separated from the primary storage site to reduce susceptibility to the same threats.

Configure the alternate storage site to facilitate recovery operations in accordance with recovery time and recovery point objectives.

Identify potential accessibility problems to the alternate storage site in the event of an area-wide disruption or disaster and outline explicit mitigation actions.

a. Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of {{ insert: param, cp-07_odp.01 }} for essential mission and business functions w...

Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats.

Identify potential accessibility problems to alternate processing sites in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.

Develop alternate processing site agreements that contain priority-of-service provisions in accordance with availability requirements (including recovery time objectives).

Prepare the alternate processing site so that the site can serve as the operational site supporting essential mission and business functions.

Plan and prepare for circumstances that preclude returning to the primary processing site.

Establish alternate telecommunications services, including necessary agreements to permit the resumption of {{ insert: param, cp-08_odp.01 }} for essential mission and business functions within {{ ...

(a) Develop primary and alternate telecommunications service agreements that contain priority-of-service provisions in accordance with availability requirements (including recovery time objective...

Obtain alternate telecommunications services to reduce the likelihood of sharing a single point of failure with primary telecommunications services.

Obtain alternate telecommunications services from providers that are separated from primary service providers to reduce susceptibility to the same threats.

(a) Require primary and alternate telecommunications service providers to have contingency plans; (b) Review provider contingency plans to ensure that the plans meet organizational contingency ...

Test alternate telecommunication services {{ insert: param, cp-08.05_odp }}.

a. Conduct backups of user-level information contained in {{ insert: param, cp-09_odp.01 }} {{ insert: param, cp-09_odp.02 }}; b. Conduct backups of system-level information contained in the sy...

Test backup information {{ insert: param, cp-9.1_prm_1 }} to verify media reliability and information integrity.

Use a sample of backup information in the restoration of selected system functions as part of contingency plan testing.

Store backup copies of {{ insert: param, cp-09.03_odp }} in a separate facility or in a fire rated container that is not collocated with the operational system.

Transfer system backup information to the alternate storage site {{ insert: param, cp-9.5_prm_1 }}.

Conduct system backup by maintaining a redundant secondary system that is not collocated with the primary system and that can be activated without loss of information or disruption to operations.

Enforce dual authorization for the deletion or destruction of {{ insert: param, cp-09.07_odp }}.

Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of {{ insert: param, cp-09.08_odp }}.

Provide for the recovery and reconstitution of the system to a known state within {{ insert: param, cp-10_prm_1 }} after a disruption, compromise, or failure.

Implement transaction recovery for systems that are transaction-based.

Addressed through tailoring.

Provide the capability to restore system components within {{ insert: param, cp-10.04_odp }} from configuration-controlled and integrity-protected information representing a known, operational stat...

Protect system components used for recovery and reconstitution.

Provide the capability to employ {{ insert: param, cp-11_odp }} in support of maintaining continuity of operations.

When {{ insert: param, cp-12_odp.02 }} are detected, enter a safe mode of operation with {{ insert: param, cp-12_odp.01 }}.

Employ {{ insert: param, cp-13_odp.01 }} for satisfying {{ insert: param, cp-13_odp.02 }} when the primary means of implementing the security function is unavailable or compromised.