NIST 800-53 REV 5 • CONTINGENCY PLANNING
CP-2(4) — Resume All Mission and Business Functions
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Practitioner Notes
This enhancement requires your contingency plan to address resuming all mission and business functions — not just the critical ones — within a defined time period.
Example 1: Beyond your critical systems, define recovery timelines for secondary systems like training platforms, development environments, and reporting tools within 72 hours.
Example 2: Include a phased recovery schedule in your plan that shows when each system tier (critical, important, nice-to-have) will be restored after a full disaster scenario.