SC-36

Requirement

Distribute the following processing and storage components across multiple [Selection: physical locations; logical domains]: [Assignment: organization-defined processing and storage components].

Discussion

Distributing processing and storage across multiple physical locations or logical domains provides a degree of redundancy or overlap for organizations. The redundancy and overlap increase the work factor of adversaries to adversely impact organizational operations, assets, and individuals. The use of distributed processing and storage does not assume a single primary processing or storage location. Therefore, it allows for parallel processing and storage.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; contingency planning policy and procedures; contingency plan; system design documentation; system configuration settings and associated documentation; system architecture; list of system physical locations (or environments) with distributed processing and storage; system facility diagrams; processing site agreements; storage site agreements; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel installing, configuring, and/or maintaining the system; organizational personnel with contingency planning and plan implementation responsibilities; system developers/integrators].

Test

[SELECT FROM: Organizational processes for distributed processing and storage across multiple physical locations; mechanisms supporting and/or implementing the capability to distribute processing and storage across multiple physical locations].

ID	Assessment Objectives
SC-36[01]	<SC-36_ODP[01] processing components> are distributed across <SC-36_ODP[02] SELECTED PARAMETER VALUE>;
SC-36[02]	<SC-36_ODP[03] storage components> are distributed across <SC-36_ODP[04] SELECTED PARAMETER VALUE>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!