NIST SP 800-53 Rev 5
CP - Contingency Planning

NIST SP 800-53 Rev 5 NIST800-CP-8: CP-8 Telecommunications Services

Establish alternate telecommunications services, including necessary agreements to permit the resumption of [Assignment: organization-defined system operations] for essential mission and business functions within [Assignment: organization-defined time period] when the primary telecommunications capabilities are unavailable at either the primary or alternate processing or storage sites.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 38 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 27011:2024 · 6 controls

  • 27011-1 Scope
  • 27011-2 Normative references
  • 27011-3 Terms and definitions
  • 27011-7.4 Physical Security of Network Sites
  • 27011-8.3 Cryptography and key management
  • 27011-8.5 Vulnerability and malware management

SOC 2 · 4 controls

  • SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure
  • SOC2-A1.3 A1.3 Testing recovery plan procedures
  • SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary
  • SOC2-CC6.7 CC6.7 Restricting and protecting information in transmission, movement and removal

FedRAMP High · 3 controls

  • CP-8 Telecommunications Services
  • CP-8(1) Telecommunications Services | Priority of Service Provisions (CP-8(1))
  • SC-7(4) External Telecommunications Services

FedRAMP Moderate · 3 controls

  • CP-8 Telecommunications Services
  • CP-8(1) Telecommunications Services | Priority of Service Provisions (CP-8(1))
  • SC-7(4) External Telecommunications Services
  • TSSR-INFO-2 Stored Communications Security
  • TSSR-INFO-3 Lawful Interception Capability
  • TSSR-NOT-3 Ministerial Direction Power

ISO 22301:2019 · 2 controls

  • 8.3.4 Resource requirements
  • 8.3.5 Implementation of solutions

ISO 27002:2022 · 2 controls

  • 7.12 Cabling security
  • 8.14 Redundancy of information processing facilities

C5 (Germany) · 1 control

  • CFTC-SS-29 Recovery Plan Accounts for Essential Service Providers
  • CPNI-AnnualCert Annual compliance certification - 1 March deadline (47 CFR 64.2009(e))

ISO 27001:2022 · 1 control

  • 8.14 Redundancy of information processing facilities
  • NIST-CSF-PR.IR-03 Mechanisms are implemented to achieve resilience requirements in normal and adverse situations
  • CP-8 CP-8 Telecommunications Services
  • CP-8 CP-8 Telecommunications Services
  • PNGCYBER-3 NICTA Oversight and Computer Emergency Response Team (CERT) Coordination
  • SOCI-SECTOR-COMMS Communications sector

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in CP - Contingency Planning

You are reading one control. How much of NIST SP 800-53 Rev 5 have you already done?

NIST SP 800-53 Rev 5 NIST800-CP-8 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of NIST SP 800-53 Rev 5 your existing evidence covers. Hold ISO 27001:2022 and 163 of 1014 NIST SP 800-53 Rev 5 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 342 were rejected on the ISO 27001:2022 pair alone.

Query this from an agent

The graph holds this control, the 38 it maps to, and the evidence behind each claim, over MCP and REST.