SI-13(5)

Requirement

Provide [Selection: real-time; near real-time] [Assignment: organization-defined failover capability] for the system.

Discussion

Failover refers to the automatic switchover to an alternate system upon the failure of the primary system. Failover capability includes incorporating mirrored system operations at alternate processing sites or periodic data mirroring at regular intervals defined by the recovery time periods of organizations.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing predictable failure prevention; system design documentation; system configuration settings and associated documentation; documentation describing the failover capability provided for the system; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel responsible for the failover capability; organizational personnel with information security responsibilities; system/network administrators; organizational personnel with contingency planning responsibilities].

Test

[SELECT FROM: Organizational processes for managing the failover capability; automated mechanisms supporting and/or implementing the failover capability].

ID	Assessment Objectives
SI-13(05)	<SI-13(05)_ODP[01] SELECTED PARAMETER VALUE> <SI-13(05)_ODP[02] failover capability> is provided for the system.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!