NIST 800-53 r5 · Controls catalogue · Family CP
CP-8Telecommunications Services
Establish alternate telecommunications services, including necessary agreements to permit the resumption of {{ insert: param, cp-08_odp.01 }} for essential mission and business functions within {{ insert: param, cp-08_odp.02 }} when the primary telecommunications capabilities are unavailable at either the primary or alternate processing or storage sites.
Last updated: 09 May 2026 03:25 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (4)AI
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-400 | Uncontrolled Resource Consumption | 3,324 | Alternate telecommunications services enable resumption of essential functions when primary services become unavailable due to uncontrolled resource consumption. |
CWE-770 | Allocation of Resources Without Limits or Throttling | 1,979 | Alternate services allow operations to continue when primary allocation of resources lacks limits or throttling. |
CWE-405 | Asymmetric Resource Consumption (Amplification) | 40 | Alternate services reduce the impact of amplification attacks that exhaust primary telecommunications resources. |
CWE-406 | Insufficient Control of Network Message Volume (Network Amplification) | 15 | Provides continuity when primary telecom is disrupted by insufficient control of network message volume or amplification. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
| No CVEs annotated to this control yet — the per-CVE backfill is in progress. | ||||