Add Continuity Plan (CP)

[wesley-dean-gsa]

The Incident Response document mentions a Continuity Plan (they said "Contingency Plan"); however, no such document exists. The only documents that exist are IR.md (Incident Response) and CM.md (Configuration Management). While likely not required under our ATU, it would be good to either include one or remove the reference. (the only thing worse than no documentation is wrong documentation)

[wesley-dean-gsa]

https://gsa-tts.slack.com/archives/CG8SNAEQM/p1723583957069759

tl;dr: the TTS handbook references the Cloud.gov Contingency Plan which is no longer found under their public-facing Team Documentation section.

[wesley-dean-gsa]

per slack:

Paul/Wes, great timing on this question! We, here in Tech Ops, have been working on closing out an open POA&M/weakness relating to the GSA Pages COOP documentation and testing. As we speak, the docs are undergoing a final review by our ISSO. All GSA Pages websites will be able to leverage the updated BIA (Business Impact Analysis), ISCP (Info System Contingency Plan) and TTX artifacts (table top exercise plan and after action report), once they become official. Stay tuned.

[wesley-dean-gsa]

I added the Blocked label as we're waiting on Tech Ops to have their documentation reviewed by their ISSO. Upon approval, their documentation will be "official" and we'll be able to use them.

[debjudy]

Worked in sprint 3; however moved back to backlog since we have dependency on Cloud team. Keeping in backlog because we should have it, so we don't lose awareness of the need.