CP-10(1) — Contingency Plan Testing

This enhancement was incorporated into CP-4. It previously required contingency plan testing as part of system recovery and reconstitution.

Example 1: Include system recovery verification steps in your annual contingency plan test — actually restore a server and validate it works, not just review procedures on paper.

Example 2: After each contingency plan test, document recovery times achieved and compare them against your RTOs to identify areas where recovery procedures need improvement.