CP-7 (4) CP-7 (4) CCI-000520 High The organization The system is not conducting the considered a HIGH inspection/assessment level. Therefore, this obtains and examines the AP is not applicable. contingency plan and conducts a walk-through of the alternate processing site to ensure it is to be used as the operational site supporting business functions. CP-7 (6) CP-7 (6) CCI-002837 blank The organization NIST has not conducting the allocated this AP. inspection/assessment Therefore, this AP is obtains and examines the not applicable. documented process to ensure the organization being inspected/assessed plans for circumstances that preclude returning to the primary processing site. CP-7 (6) CP-7 (6) CCI-002838 blank blank blank The organization NIST has not conducting the allocated this AP. inspection/assessment Therefore, this AP is obtains and examines not applicable. system resource or agreements with external support providers to ensure the organization being inspected/assessed prepares for circumstances that preclude returning to the primary processing site. CP-7 CP-7 (a) CCI-000513 High High High The organization The system is not Moderate Moderate Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the level for Availability. approved alternate processing site agreements to ensure the organization has alternate processing site support that will permit the transfer and resumption of information system operations for essential missions within 1 hour (Availability High ) 12 hours (Availability Moderate) as defined in the contingency plan.
CP-7 (4) CP-7 (4) CCI-000520 High The organization conducting the inspection/assessment obtains and examines the contingency plan and conducts a walk-through of the alternate processing site to ensure it is to be used as the operational site supporting business functions. The system is not considered a HIGH level. Therefore, this AP is not applicable. CP-7 (6) CP-7 (6) CCI-002837 blank The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed plans for circumstances that preclude returning to the primary processing site. NIST has not allocated this AP. Therefore, this AP is not applicable. CP-7 (6) CP-7 (6) CCI-002838 blank blank blank The organization conducting the inspection/assessment obtains and examines system resource or agreements with external support providers to ensure the organization being inspected/assessed prepares for circumstances that preclude returning to the primary processing site. NIST has not allocated this AP. Therefore, this AP is not applicable. CP-7 CP-7 (a) CCI-000513 High Moderate High Moderate High Moderate The organization conducting the inspection/assessment obtains and examines the approved alternate processing site agreements to ensure the organization has alternate processing site support that will permit the transfer and resumption of information system operations for essential missions within 1 hour (Availability High ) 12 hours (Availability Moderate) as defined in the contingency plan. The system is not considered a MODERATE or HIGH level for Availability.
RMF_Contingency-Plan.docx