Our CMMC overview course is available!

SC-36(2)

Requirement

Synchronize the following duplicate systems or system components: [Assignment: organization-defined duplicate systems or system components].

Discussion

SC-36 and CP-9(6) require the duplication of systems or system components in distributed locations. The synchronization of duplicated and redundant services and data helps to ensure that information contained in the distributed locations can be used in the mission or business functions of organizations, as needed.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; system design documentation; system configuration settings and associated documentation; system architecture; list of distributed processing and storage components subject to polling; system polling techniques and associated documentation or records; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel installing, configuring, and/or maintaining the system; system developers/integrators].

Test

[SELECT FROM: Mechanisms supporting and/or implementing duplicate system or system component synchronization].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!