unified
UC-BCDR-10 — Test recovery capabilities and train contingency personnel
Test business continuity, disaster recovery, and restoration capabilities at least annually through scenario exercises, failover and restore tests, and, where required for critical systems, advanced or threat-led penetration testing. Train all personnel with contingency roles on their responsibilities upon assignment and periodically thereafter. Review test and exercise results and remediate identified gaps.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Business Continuity & Disaster Recovery
- type
- detective
- category
- administrative
Details
- unified_id
- UC-BCDR-10
- title
- Test recovery capabilities and train contingency personnel
- statement
- Test business continuity, disaster recovery, and restoration capabilities at least annually through scenario exercises, failover and restore tests, and, where required for critical systems, advanced or threat-led penetration testing. Train all personnel with contingency roles on their responsibilities upon assignment and periodically thereafter. Review test and exercise results and remediate identified gaps.
- domain
- Business Continuity & Disaster Recovery
- control_type
- detective
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- CP-3
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- CP-4
- coverage
- full
- relationship
- superset_of
- framework
- soc2
- control_id
- A1.3
- coverage
- full
- relationship
- superset_of
- framework
- dora
- control_id
- DORA-Art24-27
- coverage
- partial
- delta
- vulnerability assessments and the Art 25 security-testing catalogue satisfied by companion controls; TLPT regime specifics - three-yearly cadence, authority-approved scope, independent/certified testers (Arts 26-27), and tester independence (Art 24(4)) - require dedicated controls
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel mitigates Absent or untested business continuity / disaster recovery plan
- strength
- primary
- rationale
- annual exercises, failover/restore tests, and gap remediation directly cure the untested-plan condition
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel mitigates Critical talent loss, scarcity and succession gaps
- strength
- related
- rationale
- training all contingency-role personnel reduces single-person dependency for recovery execution
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel mitigates IT resilience failure — unplanned outage, data loss, slow recovery
- strength
- primary
- rationale
- testing failover/restore and remediating gaps reduces the likelihood that DR fails to activate in a real outage
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel maps_to CP-4 — Contingency Plan Testing
- framework
- nist-800-53
- control_id
- CP-4
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- SOC 2 Type II Interim Testing tests UC-BCDR-10 — Test recovery capabilities and train contingency personnel
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel maps_to CP-3 — Contingency Training
- framework
- nist-800-53
- control_id
- CP-3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel maps_to A1.3 — The entity tests recovery plan procedures supporting system recovery to meet its objectives.
- framework
- soc2
- control_id
- A1.3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Business Continuity & DR Test Exercise operates UC-BCDR-10 — Test recovery capabilities and train contingency personnel
- SOC 2 Availability Assessment tests UC-BCDR-10 — Test recovery capabilities and train contingency personnel
- UC-BCDR-10 — Test recovery capabilities and train contingency personnel maps_to DORA-Art24-27 — Digital operational resilience testing (incl. threat-led penetration testing)
- framework
- dora
- control_id
- DORA-Art24-27
- coverage
- partial
- delta
- vulnerability assessments and the Art 25 security-testing catalogue satisfied by companion controls; TLPT regime specifics - three-yearly cadence, authority-approved scope, independent/certified testers (Arts 26-27), and tester independence (Art 24(4)) - require dedicated controls
- relationship
- intersects_with
- source_version
- Regulation (EU) 2022/2554
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.