CP-9(5)

Requirement

Transfer system backup information to the alternate storage site [Assignment: organization-defined time period and transfer rate consistent with the recovery time and recovery point objectives].

Discussion

System backup information can be transferred to alternate storage sites either electronically or by the physical shipment of storage media.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Contingency planning policy; procedures addressing system backup; contingency plan; system backup logs or records; evidence of system backup information transferred to alternate storage site; alternate storage site agreements; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system backup responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for transferring system backups to the alternate storage site; mechanisms supporting and/or implementing system backups; mechanisms supporting and/or implementing information transfer to the alternate storage site].

ID	Assessment Objectives
CP-09(05)[02]	system backup information is transferred to the alternate storage site <CP-09(05)_ODP[02] transfer rate>.
CP-09(05)[01]	system backup information is transferred to the alternate storage site for <CP-09(05)_ODP[01] time period>;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!