CP-12 Safe Mode
Guidance: nonePolicy clause: noneWhat these mean
cp12ctl| Baselines | Implementation level | Enhancements |
|---|---|---|
| Not in a baseline | System | None |
Related controls: CM-2, SA-8, SC-24, SI-13, SI-17
Control statement
Section titled “Control statement”When [Assignment: organization-defined conditions] are detected, enter a safe mode of operation with [Assignment: organization-defined restrictions].
NIST discussion
For systems that support critical mission and business functions—including military operations, civilian space operations, nuclear power plant operations, and air traffic control operations (especially real-time operational environments)—organizations can identify certain conditions under which those systems revert to a predefined safe mode of operation. The safe mode of operation, which can be activated either automatically or manually, restricts the operations that systems can execute when those conditions are encountered. Restriction includes allowing only selected functions to execute that can be carried out under limited power or with reduced communications bandwidth.
Assessment objectives (SP 800-53A)
Section titled “Assessment objectives (SP 800-53A)”Objectives and methods for CP-12
Determine if a safe mode of operation is entered with [Assignment: organization-defined restrictions] when [Assignment: organization-defined conditions] are detected.
Examine: Contingency planning policy; procedures addressing safe mode of operation for the system; contingency plan; system design documentation; system configuration settings and associated documentation; system administration manuals; system operation manuals; system installation manuals; contingency plan test records; incident handling records; system audit records; system security plan; other relevant documents or records.
Interview: Organizational personnel with system operation responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers.
Test: Mechanisms implementing safe mode of operation.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.