Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Information Assurance - COOP Plan and Testing (Not in Place for Information Technology Systems or Not Considered in the organizational Holistic Risk Assessment)
Description
Discussion Text
Failure to develop a COOP and test it periodically can result in the partial or total loss of operations and INFOSEC. A contingency plan is necessary to reduce mission impact in the event of system compromise or disaster.
REFERENCES:
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), Enclosure C, Paragraphs 15 & 32
NIST Special Publication 800-53 (SP 800-53), Rev 4, Controls:
CP-2, CP-2(1) through CP-2(8), CP-4, CP-4(1) through CP-4(4), CP-6, CP-7, CP-9, MA-6
DoDI 8500.01, SUBJECT: Cybersecurity, March 14, 2014 , Enclosure 3, paragraph 3.
DoDD 3020.26, SUBJECT: Department of Defense Continuity Programs, January 9, 2009
DoDI 3020.42, SUBJECT: Defense Continuity Plan Development, February 17, 2006
Implementation of DoD Continuity Strategy - Deputy Secretary of Defense, 25 May 07
National Security Presidential Directive (NSPD) 51 / Homeland Security Presidential Directive (HSPD) 20 - National Continuity Policy, 9 May 07
Federal Continuity Directives 1 Oct 12 and 2 Jul 13, Federal Executive Branch National Continuity Program and Requirements.
NIST Special Publication 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems, May 2010
DoD 5200.22-M (NISPOM), Incorporating Change 2, 18 May 2016, Chapter 8, paragraph 8-101.g. and 8-302.c.
REFERENCES:
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), Enclosure C, Paragraphs 15 & 32
NIST Special Publication 800-53 (SP 800-53), Rev 4, Controls:
CP-2, CP-2(1) through CP-2(8), CP-4, CP-4(1) through CP-4(4), CP-6, CP-7, CP-9, MA-6
DoDI 8500.01, SUBJECT: Cybersecurity, March 14, 2014 , Enclosure 3, paragraph 3.
DoDD 3020.26, SUBJECT: Department of Defense Continuity Programs, January 9, 2009
DoDI 3020.42, SUBJECT: Defense Continuity Plan Development, February 17, 2006
Implementation of DoD Continuity Strategy - Deputy Secretary of Defense, 25 May 07
National Security Presidential Directive (NSPD) 51 / Homeland Security Presidential Directive (HSPD) 20 - National Continuity Policy, 9 May 07
Federal Continuity Directives 1 Oct 12 and 2 Jul 13, Federal Executive Branch National Continuity Program and Requirements.
NIST Special Publication 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems, May 2010
DoD 5200.22-M (NISPOM), Incorporating Change 2, 18 May 2016, Chapter 8, paragraph 8-101.g. and 8-302.c.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.