CCI-000507

The organization identifies an alternate storage site that is separated from the primary storage site to reduce susceptibility to the same threats.

Implementation Guidance

The organization being inspected/assessed identifies and documents within the contingency plan an alternate storage site not susceptible to the same threats that exist at the primary storage site. The organization must document threats in the risk management strategy IAW PM-9, CCI 000227.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the risk management strategy and the contingency plan to ensure the organization identifies an alternate storage site that is separated from the primary storage site so as not to be susceptible to the same threats identified at the primary site.

Compelling Evidence

1.) Risk management strategy 2.) Contingency plan that identifies an alternate storage site that is separated from the primary storage

The controls below (if any) were marked by NIST as being related to CCI-000507.