id: "CP-04(04)" title: "Full Recovery and Reconstitution" family: "CP" family_name: "Contingency Planning" sort_id: "cp-04.04" priority: "P2" implementation_level: "organization" parent: "CP-04" enhancement: True
Statement
Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.
Guidance
Recovery is executing contingency plan activities to restore organizational mission and business functions. Reconstitution takes place following recovery and includes activities for returning systems to fully operational states. Organizations establish a known state for systems that includes system state information for hardware, software programs, and data. Preserving system state information facilitates system restart and return to the operational mode of organizations with less disruption of mission and business processes.
Assessment Objective: a full recovery of the system to a known state is included as part of contingency plan testing;
Assessment Objective: a full reconstitution of the system to a known state is included as part of contingency plan testing.
Contingency planning policy
procedures addressing system recovery and reconstitution
contingency plan
contingency plan test documentation
contingency plan test results
system security plan
other relevant documents or records
Organizational personnel with contingency plan testing responsibilities
organizational personnel with system recovery and reconstitution responsibilities
organizational personnel with information security responsibilities
Organizational processes for contingency plan testing
mechanisms supporting contingency plan testing
mechanisms supporting recovery and reconstitution of the system