CP-4(2)

CP-4(2): Alternate Processing Site

The organization tests the contingency plan at the alternate processing site:

(a): To familiarize contingency personnel with the facility and available resources; and

(b): To evaluate the capabilities of the alternate processing site to support contingency operations.

Overlays
None

CSF Categories
None

The controls below (if any) were marked by NIST as being related to CP-4(2).

Control	Description
CP-7	The organization: a: Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of [organization-defined information system operations] for essential missions/business functions within [organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable; b: Ensures that equipment and supplies required to transfer and resume operations are available at the alternate processing site or contracts are in place to support delivery to the site within the organization-defined time period for transfer/resumption; and c: Ensures that the alternate processing site provides information security safeguards equivalent to those of the primary site.

Control

Description

a: Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of [organization-defined information system operations] for essential missions/business functions within [organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable;

b: Ensures that equipment and supplies required to transfer and resume operations are available at the alternate processing site or contracts are in place to support delivery to the site within the organization-defined time period for transfer/resumption; and

c: Ensures that the alternate processing site provides information security safeguards equivalent to those of the primary site.

The controls below (if any) add on to the requirements of CP-4(2).

Control	Description
No controls

The CCIs below are tied to CP-4(2).

CCI	Definition
CCI-000500	Test the contingency plan at the alternate processing site to familiarize contingency personnel with the facility and available resources.
CCI-002835	Test the contingency plan at the alternate processing site to evaluate the capabilities of the alternate processing site to support contingency operations.