CP-7 (1) CP-7 (1) CCI-000516 High The organization The system is not Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the level for Availability. risk management strategy and the contingency plan to ensure the organization identifies an alternate processing site that is separated from the primary processing site so as not to be susceptible to the same threats identified at the primary site. CP-7 (2) CP-7 (2) CCI-000517 High The organization The system is not Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the for Availability. contingency plan to ensure the organization has documented potential accessibility problems to the alternate processing site in the event of an area-wide disruption or disaster. CP-7 (2) CP-7 (2) CCI-001606 High The organization The system is not Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the level for Availability. contingency plan to ensure the organization has documented explicit mitigation actions for accessibility problems identified in CP-7 (2), CCI 517 to the alternate processing site in the of an area-wide disruption or disaster. CP-7 (3) CP-7 (3) CCI-000518 High The organization The system is not Moderate conducting the considered a inspection/assessment MODERATE or HIGH obtains and examines the level for Availability. approved alternate processing site agreements to ensure they contain priority-of-service provisions in accordance with CP-2, CCI 447 for alternate processing site support (including recovery time objectives). CP-7 (4) CP-7 (4) CCI-000519 High The organization The system is not conducting the considered a HIGH inspection/assessment level. Therefore, this obtains and examines the AP is not applicable. contingency plan and conducts a walk-through of the alternate processing site to ensure it is ready to be used as the operational site supporting essential missions.
CP-7 (1) CP-7 (1) CCI-000516 High Moderate The organization conducting the inspection/assessment obtains and examines the risk management strategy and the contingency plan to ensure the organization identifies an alternate processing site that is separated from the primary processing site so as not to be susceptible to the same threats identified at the primary site. The system is not considered a MODERATE or HIGH level for Availability. CP-7 (2) CP-7 (2) CCI-000517 High Moderate The organization conducting the inspection/assessment obtains and examines the contingency plan to ensure the organization has documented potential accessibility problems to the alternate processing site in the event of an area-wide disruption or disaster. The system is not considered a MODERATE or HIGH for Availability. CP-7 (2) CP-7 (2) CCI-001606 High Moderate The organization conducting the inspection/assessment obtains and examines the contingency plan to ensure the organization has documented explicit mitigation actions for accessibility problems identified in CP-7 (2), CCI 517 to the alternate processing site in the of an area-wide disruption or disaster. The system is not considered a MODERATE or HIGH level for Availability. CP-7 (3) CP-7 (3) CCI-000518 High Moderate The organization conducting the inspection/assessment obtains and examines the approved alternate processing site agreements to ensure they contain priority-of-service provisions in accordance with CP-2, CCI 447 for alternate processing site support (including recovery time objectives). The system is not considered a MODERATE or HIGH level for Availability. CP-7 (4) CP-7 (4) CCI-000519 High The organization conducting the inspection/assessment obtains and examines the contingency plan and conducts a walk-through of the alternate processing site to ensure it is ready to be used as the operational site supporting essential missions. The system is not considered a HIGH level. Therefore, this AP is not applicable.
RMF_Contingency-Plan.docx