← CP — Contingency Planning

CP-11 Alternate Communications Protocols

Not in a baseline

Provide the capability to employ [Assignment: organization-defined alternative communications protocols] in support of maintaining continuity of operations.

Discussion

Contingency plans and the contingency training or testing associated with those plans incorporate an alternate communications protocol capability as part of establishing resilience in organizational systems. Switching communications protocols may affect software applications and operational aspects of systems. Organizations assess the potential side effects of introducing alternate communications protocols prior to implementation.

ISO/IEC 27001:2022 Crosswalk

A.5.29*

* does not fully satisfy the intent of this control (per NIST's mapping notes).