Assessment Objective
Determine if:
- CP-08(03) alternate telecommunications services from providers that are separated from primary service providers are obtained to reduce susceptibility to the same threats.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing primary and alternate telecommunications services
- contingency plan
- primary and alternate telecommunications service agreements
- alternate telecommunications service provider site
- primary telecommunications service provider site
- other relevant documents or records
Interview
- Organizational personnel with contingency plan telecommunications responsibilities
- organizational personnel with system recovery responsibilities
- primary and alternate telecommunications service providers
- organizational personnel with information security responsibilities
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | CP-08(03) Separation of Primary and Alternate Providers |