Assessment Objective

Determine if:

• CP-07(01) an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats is identified.

Assessment Methods

Examine

• Contingency planning policy
• procedures addressing alternate processing sites
• contingency plan
• alternate processing site
• alternate processing site agreements
• primary processing site agreements
• system security plan
• other relevant documents or records

Interview

• Organizational personnel with contingency plan alternate processing site responsibilities
• organizational personnel with system recovery responsibilities
• organizational personnel with information security responsibilities

Susietos užduotys

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final