Assessment Objective
Determine if:
- CP-09(03) backup copies of [Assignment: critical system software and other security-related information] are stored in a separate facility or in a fire rated container that is not collocated with the operational system.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system backup
- contingency plan
- backup storage location(s)
- system backup configurations and associated documentation
- system backup logs or records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency planning and plan implementation responsibilities
- organizational personnel with system backup responsibilities
- organizational personnel with information security responsibilities
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | CP-09(03) [H] Separate Storage for Critical Information |