CP-4

Requirement
1. Test the contingency plan for the system [Assignment: organization-defined frequency] using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: [Assignment: organization-defined tests].
2. Review the contingency plan test results; and
3. Initiate corrective actions, if needed.

Discussion

Methods for testing contingency plans to determine the effectiveness of the plans and identify potential weaknesses include checklists, walk-through and tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises. Organizations conduct testing based on the requirements in contingency plans and include a determination of the effects on organizational operations, assets, and individuals due to contingency operations. Organizations have flexibility and discretion in the breadth, depth, and timelines of corrective actions.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Contingency planning policy; procedures addressing contingency plan testing; contingency plan; contingency plan test documentation; contingency plan test results; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for contingency plan testing, reviewing, or responding to contingency plan tests; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for contingency plan testing; mechanisms supporting the contingency plan and/or contingency plan testing].

ID	Assessment Objectives
CP-04a.[03]	<CP-04_ODP[03] tests> are used to determine the readiness to execute the plan;
CP-04b.	the contingency plan test results are reviewed;
CP-04c.	corrective actions are initiated, if needed.
CP-04a.[01]	the contingency plan for the system is tested <CP-04_ODP[01] frequency>;
CP-04a.[02]	<CP-04_ODP[02] tests> are used to determine the effectiveness of the plan;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!