NIST800-CP-7 CP-7 Alternate Processing Site
NIST800-CP-7 in NIST SP 800-53 Rev 5 (NIST SP 800-53 Rev 5, Release 5.2.0). All NIST SP 800-53 Rev 5 controls held. Open NIST SP 800-53 Rev 5 on the standards site.
The control as we hold it
CP-7 Alternate Processing Site. a. Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [Assignment: organization-defined system operations] for essential mission and business functions within [Assignment: organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable; b. Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfer and resumption; and c. Provide controls at.
Reviewed and closest counterparts in the other frameworks
Reviewed rows come from a released pair; a closest match is the nearest held text and is not a reviewed row.
SOC 2
- SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure (closest match)
- SOC2-A1.3 A1.3 Testing recovery plan procedures (closest match)
- SOC2-CC9.1 CC9.1 Mitigating risks of business disruption (closest match)
HIPAA Security Rule
- 164.308(a)(7)(ii)(B) Disaster Recovery Plan (Required) (closest match)
- 164.308(a)(7)(ii)(C) Emergency Mode Operation Plan (Required) (closest match)
What an auditor commonly asks for
General guidance for this control area (domain: CP - Contingency Planning), in our words, not a statement of the standard and not binding on an assessor.
- the contingency and recovery plans
- the test and exercise records
- the backup and alternate-site records