πΌ CP-3 Contingency Training (L)(M)(H)
- Contextual name: πΌ CP-3 Contingency Training (L)(M)(H)
- ID:
/frameworks/fedramp-low-security-controls/cp/03
- Located in: πΌ Contingency Planning
Descriptionβ
a. Provide contingency training to system users consistent with assigned roles and responsibilities:
-
Within [FedRAMP Assignment: *See Additional Requirements] of assuming a contingency role or responsibility;
-
When required by system changes; and
-
[FedRAMP Assignment: at least annually] thereafter; and
b. Review and update contingency training content [FedRAMP Assignment: at least annually] and following [Assignment: organization-defined events].
CP-3 Additional FedRAMP Requirements and Guidance:
(a) Requirement: Privileged admins and engineers must take the basic contingency training within ten (10) days. Consideration must be given for those privileged admins and engineers with critical contingency-related roles, to gain enough system context and situational awareness to understand the full impact of contingency training as it applies to their respective level. Newly hired critical contingency personnel must take this more in-depth training within sixty (60) days of hire date when the training will have more impact.
Similarβ
- Sections
/frameworks/nist-sp-800-53-r5/cp/03
/frameworks/fedramp-high-security-controls/cp/03
- Internal
- ID:
dec-c-d563d3bf
- ID:
Similar Sections (Take Policies From)β
Section | Sub Sections | Internal Rules | Policies | Flags |
---|---|---|---|---|
πΌ FedRAMP High Security Controls β πΌ CP-3 Contingency Training (L)(M)(H) | 1 | |||
πΌ NIST SP 800-53 Revision 5 β πΌ CP-3 Contingency Training | 2 |
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|