Assessment Objective
Determine if:
- CP-09(06)[01] system backup is conducted by maintaining a redundant secondary system that is not collocated with the primary system;
- CP-09(06)[02] system backup is conducted by maintaining a redundant secondary system that can be activated without loss of information or disruption to operations.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system backup
- contingency plan
- system backup test results
- contingency plan test results
- contingency plan test documentation
- redundant secondary system for system backups
- location(s) of redundant secondary backup system(s)
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system backup responsibilities
- organizational personnel with information security responsibilities
- organizational personnel with responsibility for the redundant secondary system
Test
- Organizational processes for maintaining redundant secondary systems
- mechanisms supporting and/or implementing system backups
- mechanisms supporting and/or implementing information transfer to a redundant secondary system
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | CP-09(06) Redundant Secondary System |