Assessment Objective
Determine if:
- CP-10(06) system components used for recovery and reconstitution are protected.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system recovery and reconstitution
- contingency plan
- system design documentation
- system configuration settings and associated documentation
- logical access credentials
- physical access credentials
- logical access authorization records
- physical access authorization records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system recovery and reconstitution responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for protecting backup and restoration of hardware, firmware, and software
- mechanisms supporting and/or implementing protection of backups and restoration of hardware, firmware, and software
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | CP-10(06) Component Protection |