CP-7 (4) Alternate Processing Site | Preparation for Use (H)

NIST 800-53 (r4) Control:

The organization prepares the alternate processing site so that the site is ready to be used as the operational site supporting essential missions and business functions.

NIST 800-53 (r4) Supplemental Guidance:

Site preparation includes, for example, establishing configuration settings for information system components at the alternate processing site consistent with the requirements for such settings at the primary site and ensuring that essential supplies and other logistical considerations are in place. Related controls: CM-2, CM-6.

NIST 800-53 (r5) Discussion:

Site preparation includes establishing configuration settings for systems at the alternate processing site consistent with the requirements for such settings at the primary site and ensuring that essential supplies and logistical considerations are in place.

38North Guidance:

Meets Minimum Requirement:

• An alternate processing site is identified and configured to support essential mission and business functions in the case of contingency as a hot site.

• Testing shall be conducted to ensure that in the event of a contingency activity, the alternate processing site is readily available for use.

Best Practice:

• TBD.

Unofficial FedRAMP Guidance: None.

Assessment Evidence:

• Alternate processing site agreements.

• Alternate processing site configuration demonstrating alignment with the organization's CP as a hot site.

• Backup schedule and configuration showing backups are available at an alternate processing site.

• Evidence of a CP Test Plan and Test Report to show that the alternate processing site was tested during contingency planning tests

CSP Implementation Tips:

• Amazon Web Services (AWS): TBD

• Microsoft Azure: TBD

• Google Cloud Platform: TBD