CP-7 CP-7 (a) CCI-000514 High High High The organization The system is not Moderate Moderate Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the level for Availability. approved alternate processing site agreements to ensure the organization has alternate processing site support that will permit the transfer and resumption of information system operations for business functions within 1 hour (Availability High ) 12 hours (Availability Moderate) as defined in the contingency plan. CP-7 CP-7 (a) CCI-002839 High High High The organization The system is not Moderate Moderate Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the level for Availability. documented information system operations to ensure the organization inspected/assessed defines information system operations that are permitted to transfer and resume at an alternate processing sites for essential missions/business functions when the primary processing capabilities are unavailable. DoD has determined the information system operations are not appropriate to define at the Enterprise level. CP-7 CP-7 (a) CCI-000510 High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with this automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level level. DoD has defined the time period as 1 hour (Availability High ) 12 hours (Availability Moderate) as defined in the contingency plan
CP-7 CP-7 (a) CCI-000514 High Moderate High Moderate High Moderate The organization conducting the inspection/assessment obtains and examines the approved alternate processing site agreements to ensure the organization has alternate processing site support that will permit the transfer and resumption of information system operations for business functions within 1 hour (Availability High ) 12 hours (Availability Moderate) as defined in the contingency plan. The system is not considered a MODERATE or HIGH level for Availability. CP-7 CP-7 (a) CCI-002839 High Moderate High Moderate High Moderate The organization conducting the inspection/assessment obtains and examines the documented information system operations to ensure the organization inspected/assessed defines information system operations that are permitted to transfer and resume at an alternate processing sites for essential missions/business functions when the primary processing capabilities are unavailable. DoD has determined the information system operations are not appropriate to define at the Enterprise level. The system is not considered a MODERATE or HIGH level for Availability. CP-7 CP-7 (a) CCI-000510 High Moderate High Moderate High Moderate The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the time period as 1 hour (Availability High ) 12 hours (Availability Moderate) as defined in the contingency plan Automatically compliant with this CCI because they are covered at the DoD level
RMF_Contingency-Plan.docx