Navigate

CP-7(4)

CP-7(4): Preparation for Use

The organization prepares the alternate processing site so that the site is ready to be used as the operational site supporting essential missions and business functions.

Supplemental

Site preparation includes, for example, establishing configuration settings for information system components at the alternate processing site consistent with the requirements for such settings at the primary site and ensuring that essential supplies and other logistical considerations are in place.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	high

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CP-7(4).

Control	Description
CM-2	The organization develops, documents, and maintains under configuration control, a current baseline configuration of the information system.
CM-6	The organization: a: Establishes and documents configuration settings for information technology products employed within the information system using [organization-defined security configuration checklists] that reflect the most restrictive mode consistent with operational requirements; b: Implements the configuration settings; c: Identifies, documents, and approves any deviations from established configuration settings for [organization-defined information system components] based on [organization-defined operational requirements]; and d: Monitors and controls changes to the configuration settings in accordance with organizational policies and procedures.

Control

Description

CM-2

The organization develops, documents, and maintains under configuration control, a current baseline configuration of the information system.

CM-6

The organization:

a: Establishes and documents configuration settings for information technology products employed within the information system using [organization-defined security configuration checklists] that reflect the most restrictive mode consistent with operational requirements;

b: Implements the configuration settings;

c: Identifies, documents, and approves any deviations from established configuration settings for [organization-defined information system components] based on [organization-defined operational requirements]; and

d: Monitors and controls changes to the configuration settings in accordance with organizational policies and procedures.

Enhancements

The controls below (if any) add on to the requirements of CP-7(4).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CP-7(4).

CCI	Definition
CCI-000519	Prepare the alternate processing site so that the site can serve as the operational site supporting essential missions.
CCI-000520	Prepare the alternate processing site so that the site can serve as the operational site supporting essential business functions.