CCI-000521

Provide controls at the alternate processing site that are equivalent to those at the primary site.

Implementation Guidance

The organization being inspected/assessed documents the information security safeguards that are in place at both the primary and alternate sites and evidence that the alternate site was approved based on an assessment that security is equivalent at the alternate site.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documentation of the primary/alternate site information security safeguards that are in place as well as evidence that the alternate site was approved based on an assessment that security is equivalent at the alternate site.

Compelling Evidence

1.) Documentation of the primary/alternate site information security safeguards that are in place

The controls below (if any) were marked by NIST as being related to CCI-000521.