Assessment Objective
Determine if:
- CP-06a.
- CP-06a.[01] an alternate storage site is established;
- CP-06a.[02] establishment of the alternate storage site includes necessary agreements to permit the storage and retrieval of system backup information;
- CP-06b. the alternate storage site provides controls equivalent to that of the primary site.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing alternate storage sites
- contingency plan
- alternate storage site agreements
- primary storage site agreements
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency plan alternate storage site responsibilities
- organizational personnel with system recovery responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for storing and retrieving system backup information at the alternate storage site
- mechanisms supporting and/or implementing the storage and retrieval of system backup information at the alternate storage site
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | CP-06 [H] Alternate Storage Site |