Assessment Objective
Determine if:
- CP-06(02)[01] the alternate storage site is configured to facilitate recovery operations in accordance with recovery time objectives;
- CP-06(02)[02] the alternate storage site is configured to facilitate recovery operations in accordance with recovery point objectives.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing alternate storage sites
- contingency plan
- alternate storage site
- alternate storage site agreements
- alternate storage site configurations
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency plan testing responsibilities
- organizational personnel with responsibilities for testing related plans
- organizational personnel with information security responsibilities
Test
- Organizational processes for contingency plan testing
- mechanisms supporting recovery time and point objectives
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | CP-06(02) [H] Recovery Time and Recovery Point Objectives |