CP-2 (3) - Resume Mission and Business Functions
Control requirements
CP-2 (3) - 0
Plan for the resumption of [IBM Assignment: essential] mission and business functions within [Assignment: organization-defined time period] of contingency plan activation.
Additional IBM Cloud for Financial Services specifications
Contingency plans should also include planning for the resumption of all missions and business functions within an organization-defined time period of contingency plan activation.
Recovery strategies must meet the RTOs (Recovery Time Objectives) and RPOs (Recovery Point Objectives) for a minimum of six (6) weeks.
NIST supplemental guidance
Organizations may choose to conduct contingency planning activities to resume mission and business functions as part of business continuity planning or as part of business impact analyses. Organizations prioritize the resumption of mission and business functions. The time period for resuming mission and business functions may be dependent on the severity and extent of the disruptions to the system and its supporting infrastructure.