CCI-001609

The organization can activate the redundant secondary information system that is not collocated with the primary system without loss of information or disruption to operations.

Implementation Guidance

The organization being inspected/assessed establishes a service level agreement which will provide for redundant secondary system support that is not co-located with the primary system, and has configured the system so that it can be activated to accomplish system backups without a loss of information or operational disruption.

Validation Procedures

The organization conducting the inspection/assessment determines if the organization has established a service level agreement for a redundant secondary system support that is not co-located with the primary system, and has configured the system so it can be activated to accomplish system backups without a loss of information or operational disruption.

Compelling Evidence

1.) Signed and dated contingency plan, referencing section which documents that secondary backup system can be activated to accomplish system backups without a loss of information or operational disruption.

The controls below (if any) were marked by NIST as being related to CCI-001609.