CCI-002836

Ensure that the alternate storage site provides security controls equivalent to that of the primary site.

Implementation Guidance

The organization being inspected/assessed documents the information security safeguards that are in place at both the primary and alternate sites and evidence that the alternate site was approved based on an assessment that security is equivalent at the alternate site.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documentation of the primary/alternate site information security safeguards that are in place as well as evidence that the alternate site was approved based on an assessment that security is equivalent at the alternate site.

Compelling Evidence

1.) Documentation of the primary/alternate site information security safeguards that are in place 2.) Signed documentation that the alternate site was approved based on an assessment that security is equivalent at the alternate site.

The controls below (if any) were marked by NIST as being related to CCI-002836.