CP-10(4)—Information System Recovery And Reconstitution

PBMM (P3)

Secret (P3)

Operational

>Control Description

INFORMATION SYSTEM RECOVERY AND RECONSTITUTION | RESTORE WITHIN TIME PERIOD The organization provides the capability to restore information system components within ⚙organization-defined restoration time-periods from configuration-controlled and integrity-protected information representing a known, operational state for the components.

>Supplemental Guidance

Restoration of information system components includes, for example, re-imaging which restores components to known, operational states. Related control: CM-2.

>Tailoring Guidance

This security control/enhancement should be addressed where applicable and if practical to do so. Rather than re-building systems from scratch this control enhancement ensures that organizations re-build systems from a secure image, baseline or virtualized snapshots. This approach will improve the effectiveness of the recovery process.

Ask AI

Configure your API key to use AI features.