Applicable

(Y)es / (N)o

(C)onfidentiality

(I)ntegrity

(A)vailability

RPN

(C+I+A)

(S)atisfactory

L1

M2

H3

L1

M2

H3

L1

M2

H3

(O)ther than satisfactory +##

cp-7(4)

alternate processing site  | preparation for use

assessment objective:

Determine if the organization prepares the alternate processing site so that the site is ready to be used as the operational site supporting essential missions and business functions.

potential assessment methods and objects:

Examine: [select from: Contingency planning policy; procedures addressing alternate processing sites; contingency plan; alternate processing site; alternate processing site agreements; alternate processing site configurations; other relevant documents or records].

Interview: [select from: Organizational personnel with contingency plan alternate processing site responsibilities; organizational personnel with information system recovery responsibilities; organizational personnel with information security responsibilities].

Test: [SELECT FROM: Automated mechanisms supporting and/or implementing recovery at the alternate processing site].