CCI-000516

Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats.

Implementation Guidance

The organization being inspected/assessed identifies and documents within the contingency plan an alternate processing site not susceptible to the same threats that exist at the primary processing site. The organization must document threats in the risk management strategy IAW PM-9, CCI 000227.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the risk management strategy and the contingency plan to ensure the organization identifies an alternate processing site that is separated from the primary processing site so as not to be susceptible to the same threats identified at the primary site.

Compelling Evidence

1.) Risk management strategy 2.) Contingency plan that identifies an alternate processing site that is separated from the processing site

The controls below (if any) were marked by NIST as being related to CCI-000516.