CP-2(6)

Requirement

Plan for the transfer of [Selection: all; essential] mission and business functions to alternate processing and/or storage sites with minimal or no loss of operational continuity and sustain that continuity through system restoration to primary processing and/or storage sites.

Discussion

Organizations may choose to conduct contingency planning activities for alternate processing and storage sites as part of business continuity planning or business impact analyses. Primary processing and/or storage sites defined by organizations as part of contingency planning may change depending on the circumstances associated with the contingency.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Contingency planning policy; procedures addressing contingency operations for the system; contingency plan; business impact assessment; alternate processing site agreements; alternate storage site agreements; contingency plan testing documentation; contingency plan test results; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with contingency planning and plan implementation responsibilities; organizational personnel with knowledge of requirements for mission and business functions; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for transfer of essential mission and business functions to alternate processing/storage sites].

ID	Assessment Objectives
CP-02(06)[01]	the transfer of <CP-02(06)_ODP SELECTED PARAMETER VALUE> mission and business functions to alternate processing and/or storage sites with minimal or no loss of operational continuity is planned for;
CP-02(06)[02]	operational continuity is sustained until full system restoration at primary processing and/or storage sites.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!