manage.get.gov/docs/compliance/dist/system-security-plans/ato/cp-4.md

implementation-status	control-origination
c-not-implemented	c-inherited-cloud-gov c-inherited-cisa c-common-control c-system-specific-control

cp-4 - [catalog] Contingency Plan Testing

Control Statement

• [a] Test the contingency plan for the system frequency using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: organization-defined tests.

• [b] Review the contingency plan test results; and

• [c] Initiate corrective actions, if needed.

Control guidance

Methods for testing contingency plans to determine the effectiveness of the plans and identify potential weaknesses include checklists, walk-through and tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises. Organizations conduct testing based on the requirements in contingency plans and include a determination of the effects on organizational operations, assets, and individuals due to contingency operations. Organizations have flexibility and discretion in the breadth, depth, and timelines of corrective actions.

Control assessment-objective

the contingency plan for the system is tested frequency; tests are used to determine the effectiveness of the plan; tests are used to determine the readiness to execute the plan; the contingency plan test results are reviewed; corrective actions are initiated, if needed.

---

What is the solution and how is it implemented?

---

Implementation a.

Add control implementation description here for item cp-4_smt.a

---

Implementation b.

Add control implementation description here for item cp-4_smt.b

---

Implementation c.

Add control implementation description here for item cp-4_smt.c

---