Telecommunications Services

frameworkNIST SP 800-53 Rev 5.2 sectionCP Contingency Planning csf 2.0PR.IR-04 topics— frameworks2 0 10

Official textEstablish alternate telecommunications services, including necessary agreements to permit the resumption of [Assignment: organization-defined system operations] for essential mission and business functions within [Assignment: organization-defined time period] when the primary telecommunications capabilities are unavailable at either the primary or alternate processing or storage sites.NIST SP 800-53 Rev 5.2 control statement (public domain)

gap from 800-53 → gap to 800-53 →

Wrong or missing mapping? Report it

Equivalents of CP-8 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	PR.IR-04	Adequate resource capacity to ensure availability is maintained	Loosely related	No mapping. Only shares CSF PR.IR-04: related, not a mapping
ISO 27001	A.5.29 A.7.11	Information security during disruption; Supporting utilities	Crosswalk	NIST SP 800-53 → ISO 27001 mapping 1 loosely related (not mappings) A.8.6 Capacity management Loosely related Only shares CSF PR.IR-04: related, not a mapping
CIS v8.1	—	No requirement	No mapping in our data	No mapping in our data (most CIS links are editorial: CIS's published crosswalk covers 49 of 153 safeguards).
SOC 2	—	No requirement	No mapping in our data	No mapping in our data (SOC 2 links are editorial only).
PCI DSS	—	No requirement	No mapping in our data	No mapping in our data.
CMMC	—	No requirement	No mapping in our data	No mapping in our data.
HIPAA	§164.308(a)(7)(ii)(B)	Disaster Recovery Plan	Crosswalk	NIST HIPAA → SP 800-53 crosswalk 2 loosely related (not mappings) §164.308(a)(7)(ii)(A) Data Backup Plan Loosely related Only shares CSF PR.IR-04: related, not a mapping §164.310(a)(2)(i) Contingency Operations Loosely related Only shares CSF PR.IR-04: related, not a mapping
GDPR	—	No requirement	No mapping in our data	No mapping in our data (only GDPR's security articles are mapped, editorially).
NIS2	—	No requirement	No mapping in our data	No mapping in our data.
Essential Eight	—	No requirement	No mapping in our data	No mapping in our data (Essential Eight links are editorial only).
DORA	—	No requirement	No mapping in our data	No mapping in our data (DORA links are editorial, and its technical standards are not mapped).
CPS 234	—	No requirement	No mapping in our data	No mapping in our data (CPS 234 is principles-based and its links are editorial).
Cyber Essentials	—	No requirement	No mapping in our data	No mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.