Standard
NIST 800-53 contingency planning maturity assessment
The CP control family
- NIST SP 800-53 Rev. 5, Contingency Planning
- 76 questions
- 10 categories
- Maps to: IT disaster recovery, Business continuity
What the standard requires
NIST Special Publication 800-53 is the catalog of security and privacy controls used across the US federal government and widely adopted elsewhere. Its Contingency Planning (CP) family covers policy, the contingency plan, training, testing, alternate storage and processing sites, telecommunications, backups, and system recovery and reconstitution.
How ResiliencyPulse scores it
The NIST 800-53 model has 76 questions in 10 categories that follow the CP control family and its enhancements. Scores roll up to the IT disaster recovery and business continuity domains. It is written for organizations that must demonstrate CP maturity to a federal customer, an auditor, or an internal control framework built on 800-53.
Who assesses against it
Federal contractors, public institutions, and any organization whose control framework is built on NIST 800-53 and needs a maturity view of contingency planning rather than a pass-fail control test.
Questions
Do I need to be certified or regulated to use this model?
No. The model measures maturity against the standard’s structure. Certification and examination are separate processes this assessment does not replace.
Can I run this model alongside others?
Yes. Pro includes three models and Scale is unlimited. Results from every model roll up to the same eight resilience domains.