CCI-000553

Implementation Guidance

Determine if transaction recovery is implemented for systems that are transaction-based.

Validation Procedures

Examine: [SELECT FROM: Contingency planning policy; procedures addressing system recovery and reconstitution; contingency plan; system design documentation; system configuration settings and associated documentation; contingency plan test documentation; contingency plan test results; system transaction recovery records; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with responsibility for transaction recovery; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing transaction recovery capability].