CCI-000505

Establish an alternate storage site, including necessary agreements to permit the storage of system backup information.

Implementation Guidance

Determine if: - an alternate storage site is established. - establishment of the alternate storage site includes necessary agreements to permit the storage and retrieval of system backup information.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing alternate storage sites; contingency plan; alternate storage site agreements; primary storage site agreements; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with contingency plan alternate storage site responsibilities; organizational personnel with system recovery responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for storing and retrieving system backup information at the alternate storage site; mechanisms supporting and/or implementing the storage and retrieval of system backup information at the alternate storage site].

The controls below (if any) were marked by NIST as being related to CCI-000505.