This page is classified as INTERNAL.
NIST 800-53 (r4) Control:
The organization transfers information system backup information to the alternate storage site [FedRAMP Assignment: (H) time period and transfer rate consistent with the recovery time and recovery point objectives defined in the service provider and organization SLA].
NIST 800-53 (r4) Supplemental Guidance:
Information system backup information can be transferred to alternate storage sites either electronically or by physical shipment of storage media.
NIST 800-53 (r5) Discussion:
System backup information can be transferred to alternate storage sites either electronically or by the physical shipment of storage media.
38North Guidance:
Meets Minimum Requirement:
Transfer information system backup information to the alternate storage site on a monthly basis. The information system backup information will be available to ensure compliance with system specific RTOs and RPOs.
Best Practice:
TBD.
Unofficial FedRAMP Guidance: None.
Assessment Evidence:
Contingency Planning Policy highlighting transfer of information system backup information to alternate storage site on monthly basis.
Records of previous information transfer activities.
CSP Implementation Tips:
Amazon Web Services (AWS): TBD
Microsoft Azure: TBD
Google Cloud Platform: TBD