CP-6(2)

Requirement

Configure the alternate storage site to facilitate recovery operations in accordance with recovery time and recovery point objectives.

Discussion

Organizations establish recovery time and recovery point objectives as part of contingency planning. Configuration of the alternate storage site includes physical facilities and the systems supporting recovery operations that ensure accessibility and correct execution.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Contingency planning policy; procedures addressing alternate storage sites; contingency plan; alternate storage site; alternate storage site agreements; alternate storage site configurations; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with contingency plan testing responsibilities; organizational personnel with responsibilities for testing related plans; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for contingency plan testing; mechanisms supporting recovery time and point objectives].

ID	Assessment Objectives
CP-06(02)[01]	the alternate storage site is configured to facilitate recovery operations in accordance with recovery time objectives;
CP-06(02)[02]	the alternate storage site is configured to facilitate recovery operations in accordance with recovery point objectives.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!