CCI-000549

The organization maintains a redundant secondary information system that is not collocated with the primary system.

Implementation Guidance

The organization being inspected/assessed establishes and maintains a redundant, secondary backup system that is not co-located with the primary system.

Validation Procedures

The organization conducting the inspection/assessment determines if the organization is maintaining a redundant, secondary backup system that is not co-located with the primary system.

Compelling Evidence

1.) Signed and dated contingency plan, referencing section which documents that secondary backup system is located outside of a fifty mile radius from organizations physical location.

The controls below (if any) were marked by NIST as being related to CCI-000549.