home || catalog: SP800-53rev3 / class: Operational / family: (CP) Contingency Planning ||
search controls:
search nistpubs:

AC
AT
AU
CA
CM
CP

CP-01
CP-02
CP-03
CP-04
CP-05
CP-06
CP-07 *
CP-08
CP-09
CP-10

IA
IR
MA
MP
PE
PL
PM
PS
RA
SA
SC
SI
MMMMM

  CP-07: Alternate Processing Site  

base control objective:
The organization:
a. Establishes an alternate processing site including necessary agreements to permit the resumption of information system operations for essential missions and business functions within [Assignment: organization-defined time period consistent with recovery time objectives] when the primary processing capabilities are unavailable; and
b. Ensures that equipment and supplies required to resume operations within the organization-defined time period, are either available at the alternate site or contracts are in place to support delivery to the site.

supplemental objective information:
None.

enhancements to the base objective:

(1) The organization identifies an alternate processing site that is separated from the primary processing site so as not to be susceptible to the same hazards.

(2) The organization identifies potential accessibility problems to the alternate processing site in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.

(3) The organization develops alternate processing site agreements that contain priority-of-service provisions in accordance with the organization’s availability requirements.

(4) The organization fully configures the alternate processing site so that it is ready to be used as the operational site supporting essential missions and business functions.

(5) The organization ensures that the alternate processing site provides information security measures equivalent to that of the primary site.

mapping to FIPS199 baseline:

  LOW: null     MOD: base (1) (2) (3) (5)     HIGH: base (1) (2) (3) (4) (5)  

related (regimented) controls:

CP-02   Contingency Plan

documents referenced in SP800-53rev3 for CP-07:

Document Date Status Title
NIST SP800-34 May, 2010 current   Contingency Planning Guide for Information Technology Systems

Search SP800-53rev3 catalog: