CP-11 Alternate Communications Protocols
Guidance: nonePolicy clause: noneWhat these mean
cp11ctl| Baselines | Implementation level | Enhancements |
|---|---|---|
| Not in a baseline | Organization | None |
Related controls: CP-2, CP-8, CP-13
Control statement
Section titled “Control statement”Provide the capability to employ [Assignment: organization-defined alternative communications protocols] in support of maintaining continuity of operations.
NIST discussion
Contingency plans and the contingency training or testing associated with those plans incorporate an alternate communications protocol capability as part of establishing resilience in organizational systems. Switching communications protocols may affect software applications and operational aspects of systems. Organizations assess the potential side effects of introducing alternate communications protocols prior to implementation.
Assessment objectives (SP 800-53A)
Section titled “Assessment objectives (SP 800-53A)”Objectives and methods for CP-11
Determine if the capability to employ [Assignment: organization-defined alternative communications protocols] are provided in support of maintaining continuity of operations.
Examine: Contingency planning policy; procedures addressing alternative communications protocols; contingency plan; continuity of operations plan; system design documentation; system configuration settings and associated documentation; list of alternative communications protocols supporting continuity of operations; system security plan; other relevant documents or records.
Interview: Organizational personnel with contingency planning and plan implementation responsibilities; organizational personnel with continuity of operations planning and plan implementation responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers.
Test: Mechanisms employing alternative communications protocols.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.