Assessment Objective
Determine if:
- the recovery of the system to a known state is provided within [Assignment: time period] after a disruption, compromise, or failure.
- the reconstitution of the system to a known state is provided within [Assignment: time period] after a disruption, compromise, or failure.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system backup
- contingency plan
- system backup test results
- contingency plan test results
- contingency plan test documentation
- redundant secondary system for system backups
- locations of redundant secondary backup systems
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency planning, recovery, and/or reconstitution responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes implementing system recovery and reconstitution operations
- mechanisms supporting and/or implementing system recovery and reconstitution operations
Prepojené úlohy
| Typ prepojenia | Úloha |
|---|---|
| blocks | 03.08.04E System Recovery and Reconstitution |