Navigate

SI-13

SI-13: Predictable Failure Prevention

The organization:

SI-13a.: Determines mean time to failure (MTTF) for [Assignment: organization-defined information system components] in specific environments of operation; and

SI-13b.: Provides substitute information system components and a means to exchange active and standby components at [Assignment: organization-defined MTTF substitution criteria].

Supplemental

While MTTF is primarily a reliability issue, this control addresses potential failures of specific information system components that provide security capability. Failure rates reflect installation-specific consideration, not industry-average. Organizations define criteria for substitution of information system components based on MTTF value with consideration for resulting potential harm from component failures. Transfer of responsibilities between active and standby components does not compromise safety, operational readiness, or security capability (e.g., preservation of state variables). Standby components remain available at all times except for maintenance issues or recovery failures in progress.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Space Platform

Related Controls

The controls below (if any) were marked by NIST as being related to SI-13.

Control	Description
CP-2	The organization: CP-2a.: Develops a contingency plan for the information system that: CP-2a.1.: Identifies essential missions and business functions and associated contingency requirements; CP-2a.2.: Provides recovery objectives, restoration priorities, and metrics; CP-2a.3.: Addresses contingency roles, responsibilities, assigned individuals with contact information; CP-2a.4.: Addresses maintaining essential missions and business functions despite an information system disruption, compromise, or failure; CP-2a.5.: Addresses eventual, full information system restoration without deterioration of the security safeguards originally planned and implemented; and CP-2a.6.: Is reviewed and approved by [Assignment: organization-defined personnel or roles]; CP-2b.: Distributes copies of the contingency plan to [Assignment: organization-defined key contingency personnel (identified by name and/or by role) and organizational elements]; CP-2c.: Coordinates contingency planning activities with incident handling activities; CP-2d.: Reviews the contingency plan for the information system [Assignment: organization-defined frequency]; CP-2e.: Updates the contingency plan to address changes to the organization, information system, or environment of operation and problems encountered during contingency plan implementation, execution, or testing; CP-2f.: Communicates contingency plan changes to [Assignment: organization-defined key contingency personnel (identified by name and/or by role) and organizational elements]; and CP-2g.: Protects the contingency plan from unauthorized disclosure and modification.
CP-10	The organization provides for the recovery and reconstitution of the information system to a known state after a disruption, compromise, or failure.
MA-6	The organization obtains maintenance support and/or spare parts for [Assignment: organization-defined information system components] within [Assignment: organization-defined time period] of failure.

Enhancements

The controls below (if any) add on to the requirements of SI-13.

Control	Description
SI-13 (1)	The organization takes information system components out of service by transferring component responsibilities to substitute components no later than [Assignment: organization-defined fraction or percentage] of mean time to failure.
SI-13 (2)	[Withdrawn: Incorporated into SI-7 (16)].
SI-13 (3)	The organization manually initiates transfers between active and standby information system components [Assignment: organization-defined frequency] if the mean time to failure exceeds [Assignment: organization-defined time period].
SI-13 (4)	The organization, if information system component failures are detected: SI-13 (4)(a): Ensures that the standby components are successfully and transparently installed within [Assignment: organization-defined time period]; and SI-13 (4)(b): [Selection (one or more): activates [Assignment: organization-defined alarm]; automatically shuts down the information system].
SI-13 (5)	The organization provides [Selection: real-time; near real-time] [Assignment: organization-defined failover capability] for the information system.

Related CCIs

The CCIs below are tied to SI-13.

CCI	Definition
CCI-001318	The organization provides substitute information system components.
CCI-002760	The organization determines mean time to failure (MTTF) for organization-defined information system components in specific environments of operation.
CCI-002761	The organization defines the system components in specific environments of operation for which the mean time to failure (MTTF) is to be determined.
CCI-002762	The organization defines the mean time to failure (MTTF) substitution criteria to be employed as a means to determine the need to exchange active and standby components.
CCI-002763	The organization provides a means to exchange active and standby components in accordance with the organization-defined mean time to failure (MTTF) substitution criteria.