id: "CP-04(01)" title: "Coordinate with Related Plans" family: "CP" family_name: "Contingency Planning" sort_id: "cp-04.01" priority: "P2" implementation_level: "organization" parent: "CP-04" enhancement: True


Statement

Coordinate contingency plan testing with organizational elements responsible for related plans.

Guidance

Plans related to contingency planning for organizational systems include Business Continuity Plans, Disaster Recovery Plans, Continuity of Operations Plans, Crisis Communications Plans, Critical Infrastructure Plans, Cyber Incident Response Plans, and Occupant Emergency Plans. Coordination of contingency plan testing does not require organizations to create organizational elements to handle related plans or to align such elements with specific plans. However, it does require that if such organizational elements are responsible for related plans, organizations coordinate with those elements.

Assessment Objective

contingency plan testing is coordinated with organizational elements responsible for related plans.

Contingency planning policy

incident response policy

procedures addressing contingency plan testing

contingency plan testing documentation

contingency plan

business continuity plans

disaster recovery plans

continuity of operations plans

crisis communications plans

critical infrastructure plans

cyber incident response plans

occupant emergency plans

system security plan

other relevant documents or records

Organizational personnel with contingency plan testing responsibilities

personnel with responsibilities for related plans

organizational personnel with information security responsibilities