Navigate

CP-9(5)

CP-9(5): Transfer to Alternate Storage Site

Transfer system backup information to the alternate storage site [one of ].

Supplemental

System backup information can be transferred to alternate storage sites either electronically or by the physical shipment of storage media.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	moderate

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CP-9(5).

Control	Description
CP-7	a: Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [system operations for essential mission and business functions are defined;] for essential mission and business functions within [time period consistent with recovery time and recovery point objectives is defined;] when the primary processing capabilities are unavailable; b: Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfer and resumption; and c: Provide controls at the alternate processing site that are equivalent to those at the primary site.
MP-3	a: Mark system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and b: Exempt [types of system media exempt from marking when remaining in controlled areas are defined;] from marking if the media remain within [controlled areas where media is exempt from marking are defined;].
MP-4	a: Physically control and securely store [one of ] within [one of ] ; and b: Protect system media types defined in MP-4a until the media are destroyed or sanitized using approved equipment, techniques, and procedures.
MP-5	a: Protect and control [types of system media to protect and control during transport outside of controlled areas are defined;] during transport outside of controlled areas using [one of ]; b: Maintain accountability for system media during transport outside of controlled areas; c: Document activities associated with the transport of system media; and d: Restrict the activities associated with the transport of system media to authorized personnel.

Enhancements

The controls below (if any) add on to the requirements of CP-9(5).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CP-9(5).

CCI	Definition
CCI-000547	Defines the time-period and transfer rate of the system backup information to the alternate storage site consistent with the recovery time and recovery point objectives.
CCI-000548	Transfer system backup information to the alternate storage site in accordance with the organization-defined time period and transfer rate consistent with the recovery time and recovery point objectives.