Assessment Objectives
In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:
- BCD-13_A01 system operations for essential mission and business functions are defined.
Assessment rigor: 1
Origin: 53A_R5_CP-07_ODP[01] - BCD-13_A02 time period consistent with recovery time and recovery point objectives is defined.
Assessment rigor: 1
Origin: 53A_R5_CP-07_ODP[02] - BCD-13_A03 an alternate processing site, including necessary agreements to permit the transfer and resumption of system operations for essential mission and business functions, is established within an organization-defined time period when the primary processing capabilities are unavailable.
Assessment rigor: 1
Origin: 53A_R5_CP-07a. - BCD-13_A04 the equipment and supplies required to transfer operations are made available at the alternate processing site or if contracts are in place to support delivery to the site within an organization-specified time period for transfer.
Assessment rigor: 3
Origin: 53A_R5_CP-07b.[01] - BCD-13_A05 the equipment and supplies required to resume operations are made available at the alternate processing site or if contracts are in place to support delivery to the site within an organization-defined time period for resumption.
Assessment rigor: 3
Origin: 53A_R5_CP-07b.[02] - BCD-13_A06 controls provided at the alternate processing site are equivalent to those at the primary site.
Assessment rigor: 3
Origin: 53A_R5_CP-07c. - BCD-13_A07 the location or site of the facility where the system resides is planned considering physical and environmental hazards.
Assessment rigor: 3
Origin: 53A_R5_PE-23a. - BCD-13_A08 the alternate processing site provides processing capability equivalent to that of the primary site.
Assessment rigor: 2
Origin: SCF Created
Lingitud teemad
| Lingi tüüp | Teema |
|---|---|
| blocks | Alternate Processing Site |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.