CP-8 (4) Control Summary Information Responsible Role: Parameter CP-8 (4)(c): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , CP-8 (4) What is the solution and how is it implemented? Part a Part b Part c CP-9 Information System Backup (L) (M) (H) The organization: CP-9 Additional FedRAMP Requirements and Guidance: Requirement: The service provider shall determine what elements of the cloud environment require the Information System Backup control. The service provider shall determine how Information System Backup is going to be verified and appropriate periodicity of the check. Conducts backups of user-level information contained in the information system [FedRAMP Assignment: daily incremental; weekly full] CP-9 (a) Additional FedRAMP Requirements and Guidance:
CP-8 (4) Control Summary Information Responsible Role: Parameter CP-8 (4)(c): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , CP-8 (4) What is the solution and how is it implemented? Part a Part b Part c CP-9 Information System Backup (L) (M) (H) The organization: CP-9 Additional FedRAMP Requirements and Guidance: Requirement: The service provider shall determine what elements of the cloud environment require the Information System Backup control. The service provider shall determine how Information System Backup is going to be verified and appropriate periodicity of the check. Conducts backups of user-level information contained in the information system [FedRAMP Assignment: daily incremental; weekly full] CP-9 (a) Additional FedRAMP Requirements and Guidance:
FedRAMP-SSP-High-Baseline-Template.docx