Assessment Objective
Determine if:
- CP-06(01) an alternate storage site that is sufficiently separated from the primary storage site is identified to reduce susceptibility to the same threats.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing alternate storage sites
- contingency plan
- alternate storage site
- alternate storage site agreements
- primary storage site agreements
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency plan alternate storage site responsibilities
- organizational personnel with system recovery responsibilities
- organizational personnel with information security responsibilities
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | CP-06(01) [M] Separation from Primary Site |