CCI-002492

Change the location of organization-defined processing and/or storage at an organization-defined time frequency or at random time intervals.

Implementation Guidance

Determine if the location of [SC-30(03)_ODP[01]; processing and/or storage locations to be changed are defined] is changed [SC-30(03)_ODP[02]; one of the following PARAMETER VALUES is selected: {[SC-30(03)_ODP[03]; time frequency at which to change the location of processing and/or storage is defined (if selected)]; random time intervals}].

Validation Procedures

Examine: [SELECT FROM: System and communications protection policy; configuration management policy and procedures; procedures addressing concealment and misdirection techniques for the system; list of processing/storage locations to be changed at organizational time intervals; change control records; configuration management records; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel with the responsibility to change processing and/or storage locations]. Test: [SELECT FROM: Mechanisms supporting and/or implementing changing processing and/or storage locations].

The controls below (if any) were marked by NIST as being related to CCI-002492.