CP-05 Contingency Plan Update
Contingency Planning
NIST has withdrawn this control from SP 800-53. Its content moved into CP-02. The description below is the one it had before.
Description
The organization reviews the contingency plan for the information system [Assignment: organization-defined frequency, at least annually] and revises the plan to address system/organizational changes or problems encountered during plan implementation, execution, or testing.
Supplemental Guidance
Organizational changes include changes in mission, functions, or business processes supported by the information system. The organization communicates changes to appropriate organizational elements responsible for related plans (e.g., Business Continuity Plan, Disaster Recovery Plan, Continuity of Operations Plan, Business Recovery Plan, Incident Response Plan, Emergency Action Plan).
Patterns that use this control (2)
Grouped by the emphasis each pattern gives it.