(ii) the organization defines the time period within which support and/or spare parts must be obtained after a failure; and (iii) the organization obtains maintenance support and/or spare parts for the organization-defined list of security-critical information system components and/or key information technology components within the organization-defined time period of failure. Failure to meet the contingency plan requirements listed below could weaken the overall security posture of the system: [Test: CP-2(5).1 - (i) the organization plans for Contingency Plan [Test: CP-2(5).1 - Continue Essential the continuance of essential [E-# OR [NIST 800-53 w/ Continue Essential Missions / Business missions and business High W-#] DHS 4300A CP-2 Missions / Business Functions] functions with little or no loss (5)] Functions] of operational continuity; and Not Entered (ii) the organization sustains Not Entered operational continuity until full information system restoration at primary processing and/or storage sites. Failure of the ISSO to ensure Configuration [Test: [E-# OR timely responses to Change Control High - Timely W-#] [Test: Infrastructure Change Control [NIST 800-53 w/ Response to ICCB] - Timely Board (ICCB) change request
(ii) the organization defines the time period within which support and/or spare parts must be obtained after a failure; and (iii) the organization obtains maintenance support and/or spare parts for the organization-defined list of security-critical information system components and/or key information technology components within the organization-defined time period of failure. [E-# OR W-#] Contingency Plan [NIST 800-53 w/ DHS 4300A CP-2 (5)] [Test: CP-2(5).1 - Continue Essential Missions / Business Functions] Not Entered Failure to meet the contingency plan requirements listed below could weaken the overall security posture of the system: (i) the organization plans for the continuance of essential missions and business functions with little or no loss of operational continuity; and (ii) the organization sustains operational continuity until full information system restoration at primary processing and/or storage sites. High [Test: CP-2(5).1 - Continue Essential Missions / Business Functions] Not Entered [E-# OR W-#] Configuration Change Control [NIST 800-53 w/ [Test: - Timely Failure of the ISSO to ensure timely responses to Infrastructure Change Control Board (ICCB) change request High [Test: - Timely Response to ICCB]
Security%20Assessment%20Report%20Extensible.docx