# CP-05 Contingency Plan Update

NIST SP 800-53 control. Family: CP Contingency Planning. Function: corrective. In no baseline. Mapping licence: CC BY-SA 4.0.
Withdrawn from SP 800-53 by NIST. Its content moved into CP-02.

Statement: The organization reviews the contingency plan for the information system [Assignment: organization-defined frequency, at least annually] and revises the plan to address system/organizational changes or problems encountered during plan implementation, execution, or testing.
Guidance: Organizational changes include changes in mission, functions, or business processes supported by the information system. The organization communicates changes to appropriate organizational elements responsible for related plans (e.g., Business Continuity Plan, Disaster Recovery Plan, Continuity of Operations Plan, Business Recovery Plan, Incident Response Plan, Emergency Action Plan).

## Patterns that use it (2)
- Standard (2): SP-001 Client Module; SP-002 Server Module

## Clauses by framework (18 frameworks)
- iso_27002_2022: 5.29
- cobit_2019: DSS04
- mas_trm: 8
- bsi_grundschutz: DER.4
- anssi: Hygiene.35, Hygiene.36, SecNumCloud.18.1
- osfi_b13: B-13.2.6
- finma_circular: IV.E(87), IV.F(98), IV.F(99)
- gdpr: Art.32(1)(c), Art.32(1)(d)
- dora: Art.11(6)
- bio2: 5.29
- fisc: FISC.O5
- hkma_tme1: TME1.6.3
- cbb_tm: TM-14
- qatar_nia: BC
- eba_ict: 3.7.4
- sebi_cscrf: BCP-DR
- fca_sysc_13: SYSC 13.8.1
- iso_27799: 17.1

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/CP-05
- Clauses only: /api/v1/controls/CP-05?fields=mappings
- Page for people: /controls/cp-05/