existing processes. (iii) Assessment is categorized in the FISMA inventory as either a major application, minor application or subsystem. Failure to meet the contingency plan testing and exercises requirements indicated below could lead to the unavailability of critical system resources and data due to the inability to restore the system or the data in a timely manner: (i) the organization defines the Contingency Plan contingency plan tests and/or [Test: CP-4.1 - Testing and [Test: CP-4.1 - exercises to be conducted; Contingency Plan [E-# OR Exercises [NIST Contingency Plan (ii) the organization defines the High Testing] W-#] 800-53 w/ DHS Testing] frequency of contingency plan 4300A CP-4] tests and/or exercises; Not Entered Not Entered (iii) the organization tests/exercises the contingency plan using organization-defined tests/exercises in accordance with organization-defined frequency; and (iv) the organization reviews the contingency plan test/exercise results and takes corrective actions. [E-# OR Information System Failure to meet the security [Test: CA-3.1 - High W-#] Connections [NIST requirements listed below System
existing processes. (iii) Assessment is categorized in the FISMA inventory as either a major application, minor application or subsystem. [E-# OR W-#] Contingency Plan Testing and Exercises [NIST 800-53 w/ DHS 4300A CP-4] [Test: CP-4.1 - Contingency Plan Testing] Not Entered Failure to meet the contingency plan testing and exercises requirements indicated below could lead to the unavailability of critical system resources and data due to the inability to restore the system or the data in a timely manner: (i) the organization defines the contingency plan tests and/or exercises to be conducted; (ii) the organization defines the frequency of contingency plan tests and/or exercises; (iii) the organization tests/exercises the contingency plan using organization-defined tests/exercises in accordance with organization-defined frequency; and (iv) the organization reviews the contingency plan test/exercise results and takes corrective actions. High [Test: CP-4.1 - Contingency Plan Testing] Not Entered [E-# OR W-#] Information System Connections [NIST Failure to meet the security requirements listed below High [Test: CA-3.1 - System
Security%20Assessment%20Report%20Extensible.docx