{"data":{"id":"CP-11","name":"Alternate Communications Protocols","family":"CP","family_name":"Contingency Planning","withdrawn":false,"description":"Provide the capability to employ [Assignment: organization-defined alternative communications protocols] in support of maintaining continuity of operations.","supplemental_guidance":"Contingency plans and the contingency training or testing associated with those plans incorporate an alternate communications protocol capability as part of establishing resilience in organizational systems. Switching communications protocols may affect software applications and operational aspects of systems. Organizations assess the potential side effects of introducing alternate communications protocols prior to implementation.","enhancements":[],"baseline_low":false,"baseline_moderate":false,"baseline_high":false,"nist_800_53":{"rev5":{"id":"CP-11","name":"Alternate Communications Protocols","description":"Provide the capability to employ [Assignment: organization-defined alternative communications protocols] in support of maintaining continuity of operations.","discussion":"Contingency plans and the contingency training or testing associated with those plans incorporate an alternate communications protocol capability as part of establishing resilience in organizational systems. Switching communications protocols may affect software applications and operational aspects of systems. Organizations assess the potential side effects of introducing alternate communications protocols prior to implementation.","related_controls":["CP-02","CP-08","CP-13"],"baseline_low":false,"baseline_moderate":false,"baseline_high":false,"baseline_privacy":false,"new_in_rev5":false,"changes_from_rev4":"No significant changes from Rev 4."}},"compliance_mappings":{"iso_27001_2022":["A.5.29"],"iso_27002_2022":["5.29"],"cobit_2019":["DSS04"],"pci_dss_v4":[],"nist_csf_2":[],"cis_controls_v8":[],"soc2_tsc":[],"finos_ccc":[],"iso_42001_2023":[],"iec_62443":[],"asd_e8":[],"nis2":[],"apra_cps_234":[],"mas_trm":["8"],"pra_op_resilience":[],"bsi_grundschutz":["DER.4"],"anssi":[],"osfi_b13":[],"finma_circular":[],"gdpr":[],"dora":[],"bio2":["5.29"],"rbi_csf":["ITGRCA.29"],"fisc":[],"lgpd_bcb":[],"hkma_tme1":[],"mlps_2":[],"dnb_good_practice":[],"cra":[],"swift_cscf":[],"cbb_tm":["TM-14"],"cbuae":["CR-13"],"qatar_nia":["BC"],"bog_cisd":["CISD-BCM"],"bom_ctrm":["5.2"],"cbe_csf":["OVM-2"],"cbn_csf":["Part3.7"],"bot_cyber":["Ch4.2"],"eba_ict":["3.7.2"],"hipaa_sr":["§164.308(a)(7)(ii)(C)"],"sebi_cscrf":["BCP-DR","RC.RP"],"nerc_cip":[],"nrc_73_54":[],"tsa_psd":[],"ieee_1686":[],"ferc_cip":[],"doe_c2m2":[],"api_1164":[],"awia":[],"iaea_nss":[],"pci_pts":[],"fips_140":[],"cbest":[],"tiber_eu":[],"pci_hsm":[],"common_criteria":[],"isae_3402":[],"fca_sysc_13":["SYSC 13.8.2"],"fda_21_cfr_11":[],"fda_cyber":["SA-6"],"hitrust_csf":[],"iso_27799":["17.2"],"lloyds_ms":[],"naic_ds":[],"nhs_dspt":["NDG-7.4"],"pra_ss1_23":[],"solvency_ii":[],"owasp_masvs_v2":[],"csa_ccm_v4":[],"csa_aicm":[],"ccss_v9":[],"mica":[],"basel_sco60":[],"bssc":["GSP-06"],"sec_custody_digital":[],"dpdpa":[]},"attack_techniques":[],"metadata":{"last_reviewed":"2026-10-02","review_notes":"Generated from NIST SP 800-53 Rev 5 with compliance mappings from framework-coverage data 2026-10-02: iso_27001_2022 clauses taken from NIST's SP 800-53 Rev 5 to ISO/IEC 27001:2022 crosswalk (OLIR, v1.0.0). OSA had none.","mapping_status":"complete"},"function":"corrective","used_by_patterns":[]}}