CP-03.1 ยท Simulated Events

Control Description

Incorporate simulated events into contingency training to facilitate effective response by personnel in crisis situations.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

Incorporate simulated events into contingency training to facilitate effective response by personnel in crisis situations.

Supplemental Guidance

The use of simulated events creates an environment for personnel to experience actual threat events, including cyber-attacks that disable websites, ransomware attacks that encrypt organizational data on servers, hurricanes that damage or destroy organizational facilities, or hardware or software failures.