← Controls / CP

CP-12 Safe Mode

Contingency Planning

Description

When [Assignment: organization-defined conditions] are detected, enter a safe mode of operation with [Assignment: organization-defined restrictions of safe mode of operation].

Supplemental Guidance

For systems that support critical mission and business functions—including military operations, civilian space operations, nuclear power plant operations, and air traffic control operations (especially real-time operational environments)—organizations can identify certain conditions under which those systems revert to a predefined safe mode of operation. The safe mode of operation, which can be activated either automatically or manually, restricts the operations that systems can execute when those conditions are encountered. Restriction includes allowing only selected functions to execute that can be carried out under limited power or with reduced communications bandwidth.

Changes from Rev 4

No significant changes from Rev 4.

Compliance Mappings

ISO 27002:2022

5.29

COBIT 2019

DSS04

MAS TRM

8

BSI IT-Grundschutz

DER.4

EU DORA

Art.11(1)

BIO2

5.29

RBI CSF

ITGRCA.28

NCA ECC

3-1

UAE IA

T12

CBB TM

TM-14

Qatar NIA

BC

CBUAE

CR-13

CBE CSF

OVM-2

SA JS2

JS2-7.5

CBN CSF

Part3.7

BoG CISD

CISD-BCM

BoM CTRM

5.2

IOSCO Cyber Resilience

PFMI-17RR-2

CPMI-IOSCO PFMI

CG.RR

HIPAA Security Rule

§164.308(a)(7)(ii)(C)

ECB CROE

CROE.2.5.2CROE.2.5.3

EBA ICT Guidelines

3.7.2

SEBI CSCRF

RC.RP

BOT Cyber Resilience

Ch4.2

Common Criteria

CC Part 2 — FPT

Solvency II

DR.266-BCPEIOPA-ICT-4.10

Lloyd's Minimum Standards

MS8.6

FCA SYSC 13

SYSC 13.8.1

FDA Cybersecurity Guidance

SA-6

ISO 27799

17.2

NHS DSPT

NDG-7.4