CCI-000531

Obtain alternate telecommunications services from providers that are separated from primary service providers to reduce susceptibility to the same threats.

Implementation Guidance

Determine if alternate telecommunications services from providers that are separated from primary service providers are obtained to reduce susceptibility to the same threats.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing primary and alternate telecommunications services; contingency plan; primary and alternate telecommunications service agreements; alternate telecommunications service provider site; primary telecommunications service provider site; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with contingency plan telecommunications responsibilities; organizational personnel with system recovery responsibilities; primary and alternate telecommunications service providers; organizational personnel with information security responsibilities].

The controls below (if any) were marked by NIST as being related to CCI-000531.