ComplianceNIST 800-53 control

NIST-CP-6 Alternate Storage Site

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CP Contingency Planning
Control
CP-6
ATT&CK techniques mitigated
8

Control statement

a. Establish an alternate storage site, including necessary agreements to permit the storage and retrieval of system backup information; and b. Ensure that the alternate storage site provides controls equivalent to that of the primary site.

Discussion

Alternate storage sites are geographically distinct from primary storage sites and maintain duplicate copies of information and data if the primary storage site is not available. Similarly, alternate processing sites provide processing capability if the primary processing site is not available. Geographically distributed architectures that support contingency requirements may be considered alternate storage sites. Items covered by alternate storage site agreements include environmental conditions at the alternate sites, access rules for systems and facilities, physical and environmental protection requirements, and coordination of delivery and retrieval of backup media. Alternate storage sites reflect the requirements in contingency plans so that organizations can maintain essential mission and business functions despite compromise, failure, or disruption in organizational systems.

ATT&CK mappings (CTID)

• T1070 Indicator Removal • T1070.001 Clear Windows Event Logs • T1070.002 Clear Linux or Mac System Logs • T1070.008 Clear Mailbox Data • T1119 Automated Collection • T1486 Data Encrypted for Impact • T1565 Data Manipulation • T1565.001 Stored Data Manipulation

Related

Mitigates · not in database (2)

Mitigates · MITRE ATT&CK (6)

  • T1070.008 Clear Mailbox Data sub-technique
  • T1565 Data Manipulation technique
  • T1565.001 Stored Data Manipulation sub-technique
  • T1486 Data Encrypted for Impact technique
  • T1070 Indicator Removal technique
  • T1119 Automated Collection technique

Related control · Compliance (10)

  • NIST-CP-10 System Recovery and Reconstitution NIST 800-53 control
  • NIST-CP-2 Contingency Plan NIST 800-53 control
  • NIST-CP-7 Alternate Processing Site NIST 800-53 control
  • NIST-CP-8 Telecommunications Services NIST 800-53 control
  • NIST-CP-9 System Backup NIST 800-53 control
  • NIST-MP-4 Media Storage NIST 800-53 control
  • NIST-MP-5 Media Transport NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-SC-36 Distributed Processing and Storage NIST 800-53 control
  • NIST-SI-13 Predictable Failure Prevention NIST 800-53 control

Referenced by Compliance · enhancement of (3)

  • NIST-CP-6(1) Separation from Primary Site NIST 800-53 enhancement
  • NIST-CP-6(2) Recovery Time and Recovery Point Objectives NIST 800-53 enhancement
  • NIST-CP-6(3) Accessibility NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-CP Contingency Planning NIST 800-53 family

Referenced by Compliance · related control (10)

  • NIST-CP-10 System Recovery and Reconstitution NIST 800-53 control
  • NIST-CP-2 Contingency Plan NIST 800-53 control
  • NIST-CP-7 Alternate Processing Site NIST 800-53 control
  • NIST-CP-8 Telecommunications Services NIST 800-53 control
  • NIST-CP-9 System Backup NIST 800-53 control
  • NIST-MP-4 Media Storage NIST 800-53 control
  • NIST-PE-3(3) Continuous Guards NIST 800-53 enhancement
  • NIST-RA-3 Risk Assessment NIST 800-53 control
  • NIST-SC-36 Distributed Processing and Storage NIST 800-53 control
  • NIST-SI-13(5) Failover Capability NIST 800-53 enhancement