+SI-13 Predictable Failure Prevention
---+SI-13(01) Transferring Component Responsibilities
---+SI-13(03) Manual Transfer Between Components
---+SI-13(04) Standby Component Installation and Notification
---+SI-13(05) Failover Capability

SI-13 Predictable Failure Prevention

Control

  1. Determine mean time to failure (MTTF) for the following system components in specific environments of operation: [Assignement: system components] ; and
  2. Provide substitute system components and a means to exchange active and standby components in accordance with the following criteria: [Assignement: mean time to failure (MTTF) substitution criteria].

Discussion

While MTTF is primarily a reliability issue, predictable failure prevention is intended to address potential failures of system components that provide security capabilities. Failure rates reflect installation-specific consideration rather than the industry-average. Organizations define the criteria for the substitution of system components based on the MTTF value with consideration for the potential harm from component failures. The transfer of responsibilities between active and standby components does not compromise safety, operational readiness, or security capabilities. The preservation of system state variables is also critical to help ensure a successful transfer process. Standby components remain available at all times except for maintenance issues or recovery failures in progress.

Assessment Objective

  1. mean time to failure (MTTF) is determined for [Assignement: system components] in specific environments of operation;
  2. substitute system components and a means to exchange active and standby components are provided in accordance with [Assignement: mean time to failure (MTTF) substitution criteria].

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing predictable failure prevention system design documentation system configuration settings and associated documentation list of MTTF substitution criteria system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for MTTF determinations and activities organizational personnel with information security responsibilities system/network administrators organizational personnel with contingency planning responsibilities

1. Panoramica

SI-13(01) Transferring Component Responsibilities

Control

Take system components out of service by transferring component responsibilities to substitute components no later than [Assignement: fraction or percentage] of mean time to failure.

Discussion

Transferring primary system component responsibilities to other substitute components prior to primary component failure is important to reduce the risk of degraded or debilitated mission or business functions. Making such transfers based on a percentage of mean time to failure allows organizations to be proactive based on their risk tolerance. However, the premature replacement of system components can result in the increased cost of system operations.

Assessment Objective

system components are taken out of service by transferring component responsibilities to substitute components no later than [Assignement: fraction or percentage] of mean time to failure.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing predictable failure prevention system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for MTTF activities organizational personnel with information security responsibilities system/network administrators organizational personnel with contingency planning responsibilities
SI-13(03) Manual Transfer Between Components

Control

Manually initiate transfers between active and standby system components when the use of the active component reaches [Assignement: percentage] of the mean time to failure.

Discussion

For example, if the MTTF for a system component is 100 days and the MTTF percentage defined by the organization is 90 percent, the manual transfer would occur after 90 days.

Assessment Objective

transfers are initiated manually between active and standby system components when the use of the active component reaches [Assignement: percentage] of the mean time to failure.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing predictable failure prevention system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for MTTF activities organizational personnel with information security responsibilities system/network administrators organizational personnel with contingency planning responsibilities
SI-13(04) Standby Component Installation and Notification

Control

If system component failures are detected:
  1. Ensure that the standby components are successfully and transparently installed within [Assignement: time period] ; and
  2. [Selection(one-or-more): activate {{ insert: param, si-13.04_odp.03 }} ; automatically shut down the system; {{ insert: param, si-13.04_odp.04 }} ].

Discussion

Automatic or manual transfer of components from standby to active mode can occur upon the detection of component failures.

Assessment Objective

  1. the standby components are successfully and transparently installed within [Assignement: time period] if system component failures are detected;
  2. [Selection(one-or-more): activate {{ insert: param, si-13.04_odp.03 }} ; automatically shut down the system; {{ insert: param, si-13.04_odp.04 }} ] are performed if system component failures are detected.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing predictable failure prevention system design documentation system configuration settings and associated documentation list of actions to be taken once system component failure is detected system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for MTTF activities organizational personnel with information security responsibilities system/network administrators organizational personnel with contingency planning responsibilities
SI-13(05) Failover Capability

Control

Provide [Selection: real-time; near real-time] [Assignement: failover capability] for the system.

Discussion

Failover refers to the automatic switchover to an alternate system upon the failure of the primary system. Failover capability includes incorporating mirrored system operations at alternate processing sites or periodic data mirroring at regular intervals defined by the recovery time periods of organizations.

Assessment Objective

[Selection: real-time; near real-time] [Assignement: failover capability] is provided for the system.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing predictable failure prevention system design documentation system configuration settings and associated documentation documentation describing the failover capability provided for the system system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for the failover capability organizational personnel with information security responsibilities system/network administrators organizational personnel with contingency planning responsibilities

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by SI-13 Predictable Failure Prevention – Assessment Procedure
is blocked by Predictable Failure Analysis
is blocked by Failover Capability