1. Home
  2. Mapping Frameworks
  3. NIST 800-53 Home
  4. Contingency Planning Capability Group

NIST 800-53 Contingency Planning Capability Group

All Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
CP-09 System Backup Protects T1003 OS Credential Dumping
CP-09 System Backup Protects T1003.003 NTDS
CP-09 System Backup Protects T1025 Data from Removable Media
CP-06 Alternate Storage Site Protects T1070.002 Clear Linux or Mac System Logs
CP-07 Alternate Processing Site Protects T1070.002 Clear Linux or Mac System Logs
CP-09 System Backup Protects T1070.002 Clear Linux or Mac System Logs
CP-06 Alternate Storage Site Protects T1119 Automated Collection
CP-07 Alternate Processing Site Protects T1119 Automated Collection
CP-09 System Backup Protects T1119 Automated Collection
CP-10 System Recovery and Reconstitution Protects T1486 Data Encrypted for Impact
CP-02 Contingency Plan Protects T1486 Data Encrypted for Impact
CP-06 Alternate Storage Site Protects T1486 Data Encrypted for Impact
CP-07 Alternate Processing Site Protects T1486 Data Encrypted for Impact
CP-09 System Backup Protects T1486 Data Encrypted for Impact
CP-10 System Recovery and Reconstitution Protects T1491 Defacement
CP-02 Contingency Plan Protects T1491 Defacement
CP-07 Alternate Processing Site Protects T1491 Defacement
CP-09 System Backup Protects T1491 Defacement
CP-10 System Recovery and Reconstitution Protects T1491.001 Internal Defacement
CP-02 Contingency Plan Protects T1491.001 Internal Defacement
CP-07 Alternate Processing Site Protects T1491.001 Internal Defacement
CP-09 System Backup Protects T1491.001 Internal Defacement
CP-10 System Recovery and Reconstitution Protects T1491.002 External Defacement
CP-02 Contingency Plan Protects T1491.002 External Defacement
CP-07 Alternate Processing Site Protects T1491.002 External Defacement
CP-09 System Backup Protects T1491.002 External Defacement
CP-10 System Recovery and Reconstitution Protects T1565 Data Manipulation
CP-06 Alternate Storage Site Protects T1565 Data Manipulation
CP-07 Alternate Processing Site Protects T1565 Data Manipulation
CP-09 System Backup Protects T1565 Data Manipulation
CP-10 System Recovery and Reconstitution Protects T1565.001 Stored Data Manipulation
CP-06 Alternate Storage Site Protects T1565.001 Stored Data Manipulation
CP-07 Alternate Processing Site Protects T1565.001 Stored Data Manipulation
CP-09 System Backup Protects T1565.001 Stored Data Manipulation
CP-09 System Backup Protects T1565.003 Runtime Data Manipulation
CP-10 System Recovery and Reconstitution Protects T1561.002 Disk Structure Wipe
CP-02 Contingency Plan Protects T1561.002 Disk Structure Wipe
CP-07 Alternate Processing Site Protects T1561.002 Disk Structure Wipe
CP-09 System Backup Protects T1561.002 Disk Structure Wipe
CP-10 System Recovery and Reconstitution Protects T1561.001 Disk Content Wipe
CP-02 Contingency Plan Protects T1561.001 Disk Content Wipe
CP-07 Alternate Processing Site Protects T1561.001 Disk Content Wipe
CP-09 System Backup Protects T1561.001 Disk Content Wipe
CP-10 System Recovery and Reconstitution Protects T1561 Disk Wipe
CP-02 Contingency Plan Protects T1561 Disk Wipe
CP-07 Alternate Processing Site Protects T1561 Disk Wipe
CP-09 System Backup Protects T1561 Disk Wipe
CP-06 Alternate Storage Site Protects T1070.001 Clear Windows Event Logs
CP-07 Alternate Processing Site Protects T1070.001 Clear Windows Event Logs
CP-09 System Backup Protects T1070.001 Clear Windows Event Logs
CP-09 System Backup Protects T1005 Data from Local System
CP-10 System Recovery and Reconstitution Protects T1485 Data Destruction
CP-02 Contingency Plan Protects T1485 Data Destruction
CP-07 Alternate Processing Site Protects T1485 Data Destruction
CP-09 System Backup Protects T1485 Data Destruction
CP-06 Alternate Storage Site Protects T1070 Indicator Removal
CP-07 Alternate Processing Site Protects T1070 Indicator Removal
CP-09 System Backup Protects T1070 Indicator Removal
CP-10 System Recovery and Reconstitution Protects T1490 Inhibit System Recovery
CP-02 Contingency Plan Protects T1490 Inhibit System Recovery
CP-07 Alternate Processing Site Protects T1490 Inhibit System Recovery
CP-09 System Backup Protects T1490 Inhibit System Recovery
CP-06 Alternate Storage Site Protects T1070.008 Clear Mailbox Data
CP-07 Alternate Processing Site Protects T1070.008 Clear Mailbox Data
CP-09 System Backup Protects T1070.008 Clear Mailbox Data

Capabilities

Capability ID Capability Name Number of Mappings
CP-06 Alternate Storage Site 8
CP-07 Alternate Processing Site 16
CP-09 System Backup 21
CP-10 System Recovery and Reconstitution 11
CP-02 Contingency Plan 9