CP-3 Contingency Training

Control statement

a. Provide contingency training to system users consistent with assigned roles and responsibilities:
        1. Within {{ insert: param, cp-03_odp.01 }} of assuming a contingency role or responsibility;
        2. When required by system changes; and
        3.  {{ insert: param, cp-03_odp.02 }} thereafter; and
    b. Review and update contingency training content {{ insert: param, cp-03_odp.03 }} and following {{ insert: param, cp-03_odp.04 }}.
        (a) Requirement: Privileged admins and engineers must take the basic contingency training within 10 days. Consideration must be given for those privileged admins and engineers with critical contingency-related roles, to gain enough system context and situational awareness to understand the full impact of contingency training as it applies to their respective level. Newly hired critical contingency personnel must take this more in-depth training within 60 days of hire date when the training will have more impact.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators