+KSI-RPL Recovery Planning
---+KSI-RPL-ABO Aligning Backups with Objectives
---+KSI-RPL-ARP Aligning Recovery Plan
---+KSI-RPL-RRO Reviewing Recovery Objectives
---+KSI-RPL-TRC Testing Recovery Capabilities
|
KSI-RPL Recovery Planning
1. Overzicht
| Titel |
Standaard |
|
KSI-RPL-ABO Aligning Backups with Objectives
|
The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed. NIST SP 800-53 Rev. 5 controls: CM-2(3), CP-6, CP-9, CP-10, CP-10(2) Defined terms: Information Resource, Machine-Based (Information Resources), Persistently
|
|
KSI-RPL-ARP Aligning Recovery Plan
|
The alignment of recovery plans with defined recovery objectives is persistently reviewed. NIST SP 800-53 Rev. 5 controls: CP-2, CP-2(1), CP-2(3), CP-4(1), CP-6, CP-6(1), CP-6(3), CP-7, CP-7(1), CP-7(2), CP-7(3), CP-8, CP-8(1), CP-8(2), CP-10, CP-10(2) Defined terms: Persistently
|
|
KSI-RPL-RRO Reviewing Recovery Objectives
|
The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities. NIST SP 800-53 Rev. 5 controls: CP-2(3), CP-10 Defined terms: Persistently
|
|
KSI-RPL-TRC Testing Recovery Capabilities
|
The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested. NIST SP 800-53 Rev. 5 controls: CP-10, CP-2(1), CP-2(3), CP-4, CP-4(1), CP-6, CP-6(1), CP-9(1), IR-3, IR-3(2), IR-9(3), SC-12(1) Defined terms: Incident, Persistently
|
1.1 Referenties
1.2 Geïdentificeerde eisen
1.3 Gerelateerde regelingen
2. Geïdentificeerde eisen
3. Gerelateerde regelingen
Regelingen
| Bron |
Regelgeving |
- FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.
DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.
|