Assessment Objective

Determine if:

• SI-13(04)(a) the standby components are successfully and transparently installed within [Assignment: time period] if system component failures are detected;
• SI-13(04)(b) [Selection (one or more): activate [Assignment: alarm] ; automatically shut down the system; [Assignment: action] ] are performed if system component failures are detected.

Assessment Methods

Examine

• System and information integrity policy
• system and information integrity procedures
• procedures addressing predictable failure prevention
• system design documentation
• system configuration settings and associated documentation
• list of actions to be taken once system component failure is detected
• system audit records
• system security plan
• other relevant documents or records

Interview

• Organizational personnel responsible for MTTF activities
• organizational personnel with information security responsibilities
• system/network administrators
• organizational personnel with contingency planning responsibilities

Test

• Organizational processes for managing MTTF
• automated mechanisms supporting and/or implementing the transparent installation of standby components
• automated mechanisms supporting and/or implementing alarms or system shutdown if component failures are detected

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final