Navigate

SI-13(5)

SI-13(5): Failover Capability

Provide [one of "real-time"/"near real-time"] [a failover capability for the system has been defined;] for the system.

Supplemental

Failover refers to the automatic switchover to an alternate system upon the failure of the primary system. Failover capability includes incorporating mirrored system operations at alternate processing sites or periodic data mirroring at regular intervals defined by the recovery time periods of organizations.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-13(5).

Control	Description
CP-6	a: Establish an alternate storage site, including necessary agreements to permit the storage and retrieval of system backup information; and b: Ensure that the alternate storage site provides controls equivalent to that of the primary site.
CP-7	a: Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [system operations for essential mission and business functions are defined;] for essential mission and business functions within [time period consistent with recovery time and recovery point objectives is defined;] when the primary processing capabilities are unavailable; b: Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfer and resumption; and c: Provide controls at the alternate processing site that are equivalent to those at the primary site.
CP-9	a: Conduct backups of user-level information contained in [system components for which to conduct backups of user-level information is defined;] [frequency at which to conduct backups of user-level information consistent with recovery time and recovery point objectives is defined;]; b: Conduct backups of system-level information contained in the system [frequency at which to conduct backups of system-level information consistent with recovery time and recovery point objectives is defined;]; c: Conduct backups of system documentation, including security- and privacy-related documentation [frequency at which to conduct backups of system documentation consistent with recovery time and recovery point objectives is defined;] ; and d: Protect the confidentiality, integrity, and availability of backup information.

Enhancements

The controls below (if any) add on to the requirements of SI-13(5).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-13(5).

CCI	Definition
CCI-000558	Defines the real-time or near-real-time failover capability to be provided for the system.
CCI-000559	Provide real-time or near-real-time organization-defined failover capability for the system.