# CP-4 — Contingency Plan Testing

- **Control ID:** CP-4
- **Family:** [CP](/md/families/CP.md)
- **Baselines:** low, moderate, high
- **Enhancement of:** No content available.

## Description

Test the contingency plan for the system \[assignment\] using the following tests to determine the effectiveness of the plan and the readiness to execute the plan: \[assignment\]. Review the contingency plan test results; and Initiate corrective actions, if needed.

## Discussion

Methods for testing contingency plans to determine the effectiveness of the plans and identify potential weaknesses include checklists, walk-through and tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises. Organizations conduct testing based on the requirements in contingency plans and include a determination of the effects on organizational operations, assets, and individuals due to contingency operations. Organizations have flexibility and discretion in the breadth, depth, and timelines of corrective actions.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

- [ID.IM-02](/md/csf/ID.IM-02.md) — ID.IM-02
- [RC.RP-03](/md/csf/RC.RP-03.md) — The integrity of backups and other restoration assets is verified before using them for restoration

## Related controls

- [AT-3](/md/controls/AT-3.md)
- [CP-2](/md/controls/CP-2.md)
- [CP-3](/md/controls/CP-3.md)
- [CP-8](/md/controls/CP-8.md)
- [CP-9](/md/controls/CP-9.md)
- [IR-3](/md/controls/IR-3.md)
- [IR-4](/md/controls/IR-4.md)
- [PL-2](/md/controls/PL-2.md)
- [PM-14](/md/controls/PM-14.md)
- [SR-2](/md/controls/SR-2.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.