CCI-002836

Ensure that the alternate storage site provides security controls equivalent to that of the primary site.

Implementation Guidance

Determine if the alternate storage site provides controls equivalent to that of the primary site.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing alternate storage sites; contingency plan; alternate storage site agreements; primary storage site agreements; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with contingency plan alternate storage site responsibilities; organizational personnel with system recovery responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for storing and retrieving system backup information at the alternate storage site; mechanisms supporting and/or implementing the storage and retrieval of system backup information at the alternate storage site].

The controls below (if any) were marked by NIST as being related to CCI-002836.