NIST SP 800-53 Revision 5.1 HIGH
CP Contingency Planning

NIST SP 800-53 Revision 5.1 HIGH CP-10(2): System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based

System Recovery and Reconstitution | Transaction Recovery. Implement transaction recovery for systems that are transaction-based

What else in your programme already covers this

This control maps to 14 controls across 7 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • NIST-CSF-PR.DS-11 Backups of data are created, protected, maintained, and tested
  • NIST-CSF-RC.RP-03 The integrity of backups and other restoration assets is verified before using them for restoration
  • NIST-CSF-RC.RP-04 Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
  • NIST-CSF-RC.RP-05 The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed

CIS Controls v8 · 3 controls

ISO 27001:2022 · 3 controls

  • 5.29 Information security during disruption
  • 5.30 ICT readiness for business continuity
  • 8.13 Information backup

ISO 22301:2019 · 1 control

ISO 27002:2022 · 1 control

  • 5.30 ICT readiness for business continuity

SOC 2 · 1 control

  • SOC2-A1.3 Recovery plan procedures support system recovery from failures

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in CP Contingency Planning

Query this from an agent

The graph holds this control, the 14 it maps to, and the evidence behind each claim, over MCP and REST.