+KSI-RPL Recovery Planning
---+KSI-RPL-ABO Aligning Backups with Objectives
---+KSI-RPL-ARP Aligning Recovery Plan
---+KSI-RPL-RRO Reviewing Recovery Objectives
---+KSI-RPL-TRC Testing Recovery Capabilities

KSI-RPL Recovery Planning

1. Pārskats

Nosaukums Standarts
KSI-RPL-ABO Aligning Backups with Objectives

The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed.

NIST SP 800-53 Rev. 5 controls: CM-2(3), CP-6, CP-9, CP-10, CP-10(2)

Defined terms: Information Resource, Machine-Based (Information Resources), Persistently

KSI-RPL-ARP Aligning Recovery Plan

The alignment of recovery plans with defined recovery objectives is persistently reviewed.

NIST SP 800-53 Rev. 5 controls: CP-2, CP-2(1), CP-2(3), CP-4(1), CP-6, CP-6(1), CP-6(3), CP-7, CP-7(1), CP-7(2), CP-7(3), CP-8, CP-8(1), CP-8(2), CP-10, CP-10(2)

Defined terms: Persistently

KSI-RPL-RRO Reviewing Recovery Objectives

The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities.

NIST SP 800-53 Rev. 5 controls: CP-2(3), CP-10

Defined terms: Persistently

KSI-RPL-TRC Testing Recovery Capabilities

The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested.

NIST SP 800-53 Rev. 5 controls: CP-10, CP-2(1), CP-2(3), CP-4, CP-4(1), CP-6, CP-6(1), CP-9(1), IR-3, IR-3(2), IR-9(3), SC-12(1)

Defined terms: Incident, Persistently

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

Prasības
Avots Prasība

3. Saistītie tiesību akti

Tiesību akti
Avots Regulējums
  • FedRAMP Consolidated Rules -

    EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

    DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.