Assessment Objective
Determine if:
- CP-04(02)(a) the contingency plan is tested at the alternate processing site to familiarize contingency personnel with the facility and available resources;
- CP-04(02)(b) the contingency plan is tested at the alternate processing site to evaluate the capabilities of the alternate processing site to support contingency operations.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing contingency plan testing
- contingency plan
- contingency plan test documentation
- contingency plan test results
- alternate processing site agreements
- service-level agreements
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency planning and plan implementation responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for contingency plan testing
- mechanisms supporting the contingency plan and/or contingency plan testing
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | CP-04(02) Alternate Processing Site |