Assessment Objective
Determine if:
- CP-07(01) an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats is identified.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing alternate processing sites
- contingency plan
- alternate processing site
- alternate processing site agreements
- primary processing site agreements
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency plan alternate processing site responsibilities
- organizational personnel with system recovery responsibilities
- organizational personnel with information security responsibilities
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | CP-07(01) Separation from Primary Site |