CyberStrikeus/CyberStrike - Page 124

cp-2-8-identify-critical-assets

Identify critical system assets supporting [organization-defined] mission and business functions.

cp-2-contingency-plan

Develop a contingency plan for the system that: Identifies essential mission and business functions and associated contingency requirements; Provides

cp-3-1-simulated-events

Incorporate simulated events into contingency training to facilitate effective response by personnel in crisis situations.

cp-3-2-mechanisms-used-in-training-environments

Employ mechanisms used in operations to provide a more thorough and realistic contingency training environment.

cp-3-contingency-training

Provide contingency training to system users consistent with assigned roles and responsibilities: Within [organization-defined] of assuming a continge

cp-4-1-coordinate-with-related-plans

Coordinate contingency plan testing with organizational elements responsible for related plans.

cp-4-2-alternate-processing-site

Test the contingency plan at the alternate processing site: To familiarize contingency personnel with the facility and available resources; and To eva

cp-4-3-automated-testing

Test the contingency plan using [organization-defined].

cp-4-4-full-recovery-and-reconstitution

Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

cp-4-5-self-challenge

Employ [organization-defined] to [organization-defined] to disrupt and adversely affect the system or system component.

cp-4-contingency-plan-testing

Test the contingency plan for the system [organization-defined] using the following tests to determine the effectiveness of the plan and the readin...

cp-5-contingency-plan-update

Contingency Plan Update

cp-6-1-separation-from-primary-site

Identify an alternate storage site that is sufficiently separated from the primary storage site to reduce susceptibility to the same threats.

cp-6-2-recovery-time-and-recovery-point-objectives

Configure the alternate storage site to facilitate recovery operations in accordance with recovery time and recovery point objectives.

cp-6-3-accessibility

Identify potential accessibility problems to the alternate storage site in the event of an area-wide disruption or disaster and outline explicit mitig

cp-6-alternate-storage-site

Establish an alternate storage site, including necessary agreements to permit the storage and retrieval of system backup information;

cp-7-1-separation-from-primary-site

Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats.

cp-7-2-accessibility

Identify potential accessibility problems to alternate processing sites in the event of an area-wide disruption or disaster and outlines explicit miti

cp-7-3-priority-of-service

Develop alternate processing site agreements that contain priority-of-service provisions in accordance with availability requirements (including recov

cp-7-4-preparation-for-use

Prepare the alternate processing site so that the site can serve as the operational site supporting essential mission and business functions.

cp-7-5-equivalent-information-security-safeguards

Equivalent Information Security Safeguards

cp-7-6-inability-to-return-to-primary-site

Plan and prepare for circumstances that preclude returning to the primary processing site.

cp-7-alternate-processing-site

Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [organization-defined] for essentia...

cp-8-1-priority-of-service-provisions

Develop primary and alternate telecommunications service agreements that contain priority-of-service provisions in accordance with availability req...

cp-8-2-single-points-of-failure

Obtain alternate telecommunications services to reduce the likelihood of sharing a single point of failure with primary telecommunications services.

cp-8-3-separation-of-primary-and-alternate-providers

Obtain alternate telecommunications services from providers that are separated from primary service providers to reduce susceptibility to the same thr

cp-8-4-provider-contingency-plan

Require primary and alternate telecommunications service providers to have contingency plans;

cp-8-5-alternate-telecommunication-service-testing

Test alternate telecommunication services [organization-defined].

cp-8-telecommunications-services

Establish alternate telecommunications services, including necessary agreements to permit the resumption of [organization-defined] for essential missi

cp-9-1-testing-for-reliability-and-integrity

Test backup information [organization-defined] to verify media reliability and information integrity.

cp-9-2-test-restoration-using-sampling

Use a sample of backup information in the restoration of selected system functions as part of contingency plan testing.

cp-9-3-separate-storage-for-critical-information

Store backup copies of [organization-defined] in a separate facility or in a fire rated container that is not collocated with the operational system.

cp-9-4-protection-from-unauthorized-modification

Protection from Unauthorized Modification

cp-9-5-transfer-to-alternate-storage-site

Transfer system backup information to the alternate storage site [organization-defined].

cp-9-6-redundant-secondary-system

Conduct system backup by maintaining a redundant secondary system that is not collocated with the primary system and that can be activated without los

cp-9-7-dual-authorization-for-deletion-or-destruction

Enforce dual authorization for the deletion or destruction of [organization-defined].

cp-9-8-cryptographic-protection

Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of [organization-defined].

cp-9-system-backup

Conduct backups of user-level information contained in [organization-defined] [organization-defined];

ia-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] identification and authentication policy that: Procedures to faci

ia-10-adaptive-authentication

Require individuals accessing the system to employ [organization-defined] under specific [organization-defined].