Assessment Objective
Determine if:
- SI-13a. mean time to failure (MTTF) is determined for [Assignment: system components] in specific environments of operation;
- SI-13b. substitute system components and a means to exchange active and standby components are provided in accordance with [Assignment: mean time to failure (MTTF) substitution criteria].
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing predictable failure prevention
- system design documentation
- system configuration settings and associated documentation
- list of MTTF substitution criteria
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for MTTF determinations and activities
- organizational personnel with information security responsibilities
- system/network administrators
- organizational personnel with contingency planning responsibilities
Test
- Organizational processes for managing MTTF
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | SI-13 Predictable Failure Prevention |