home || catalog: SP800-53rev3 / class: Operational / family: (CP) Contingency Planning ||
search controls:
search nistpubs:

AC
AT
AU
CA
CM
CP

CP-01
CP-02
CP-03
CP-04
CP-05
CP-06 *
CP-07
CP-08
CP-09
CP-10

IA
IR
MA
MP
PE
PL
PM
PS
RA
SA
SC
SI
MMMMM

  CP-06: Alternate Storage Site  

base control objective:
The organization establishes an alternate storage site including necessary agreements to permit the storage and recovery of information system backup information.

supplemental objective information:
None.

enhancements to the base objective:

(1) The organization identifies an alternate storage site that is separated from the primary storage site so as not to be susceptible to the same hazards.

(2) The organization configures the alternate storage site to facilitate recovery operations in accordance with recovery time and recovery point objectives.

(3) The organization identifies potential accessibility problems to the alternate storage site in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.
Enhancement Supplemental Guidance: Explicit mitigation actions include, for example, duplicating backup information at another alternate storage site if access to the first alternate site is hindered; or, if electronic accessibility to the alternate site is disrupted, planning for physical access to retrieve backup information.

mapping to FIPS199 baseline:

  LOW: null     MOD: base (1) (3)     HIGH: base (1) (2) (3)  

related (regimented) controls:

CP-02   Contingency Plan
CP-09   Information System Backup
MP-04   Media Storage

documents referenced in SP800-53rev3 for CP-06:

Document Date Status Title
NIST SP800-34 May, 2010 current   Contingency Planning Guide for Information Technology Systems

Search SP800-53rev3 catalog: