ComplianceNIST 800-53 control

NIST-CP-7 Alternate Processing Site

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CP Contingency Planning
Control
CP-7
ATT&CK techniques mitigated
16

Control statement

a. Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [Assignment: system operations] for essential mission and business functions within [Assignment: time period] when the primary processing capabilities are unavailable; b. Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfer and resumption; and c. Provide controls at the alternate processing site that are equivalent to those at the primary site.

Discussion

Alternate processing sites are geographically distinct from primary processing sites and provide processing capability if the primary processing site is not available. The alternate processing capability may be addressed using a physical processing site or other alternatives, such as failover to a cloud-based service provider or other internally or externally provided processing service. Geographically distributed architectures that support contingency requirements may also be considered alternate processing sites. Controls that are covered by alternate processing site agreements include the environmental conditions at alternate sites, access rules, physical and environmental protection requirements, and the coordination for the transfer and assignment of personnel. Requirements are allocated to alternate processing sites that reflect the requirements in contingency plans to maintain essential mission and business functions despite disruption, compromise, or failure in organizational systems.

ATT&CK mappings (CTID)

• T1070 Indicator Removal • T1070.001 Clear Windows Event Logs • T1070.002 Clear Linux or Mac System Logs • T1070.008 Clear Mailbox Data • T1119 Automated Collection • T1485 Data Destruction • T1486 Data Encrypted for Impact • T1490 Inhibit System Recovery • T1491 Defacement • T1491.001 Internal Defacement • T1491.002 External Defacement • T1561 Disk Wipe • T1561.001 Disk Content Wipe • T1561.002 Disk Structure Wipe • T1565 Data Manipulation • T1565.001 Stored Data Manipulation

Related

Mitigates · not in database (2)

Mitigates · MITRE ATT&CK (14)

  • T1070.008 Clear Mailbox Data sub-technique
  • T1565 Data Manipulation technique
  • T1565.001 Stored Data Manipulation sub-technique
  • T1491.001 Internal Defacement sub-technique
  • T1491.002 External Defacement sub-technique
  • T1561 Disk Wipe technique
  • T1561.001 Disk Content Wipe sub-technique
  • T1561.002 Disk Structure Wipe sub-technique
  • T1491 Defacement technique
  • T1490 Inhibit System Recovery technique
  • T1486 Data Encrypted for Impact technique
  • T1485 Data Destruction technique
  • T1070 Indicator Removal technique
  • T1119 Automated Collection technique

Related control · Compliance (12)

  • NIST-CP-10 System Recovery and Reconstitution NIST 800-53 control
  • NIST-CP-2 Contingency Plan NIST 800-53 control
  • NIST-CP-6 Alternate Storage Site NIST 800-53 control
  • NIST-CP-8 Telecommunications Services NIST 800-53 control
  • NIST-CP-9 System Backup NIST 800-53 control
  • NIST-MA-6 Timely Maintenance NIST 800-53 control
  • NIST-PE-11 Emergency Power NIST 800-53 control
  • NIST-PE-12 Emergency Lighting NIST 800-53 control
  • NIST-PE-17 Alternate Work Site NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-SC-36 Distributed Processing and Storage NIST 800-53 control
  • NIST-SI-13 Predictable Failure Prevention NIST 800-53 control

Referenced by Compliance · enhancement of (5)

  • NIST-CP-7(1) Separation from Primary Site NIST 800-53 enhancement
  • NIST-CP-7(2) Accessibility NIST 800-53 enhancement
  • NIST-CP-7(3) Priority of Service NIST 800-53 enhancement
  • NIST-CP-7(4) Preparation for Use NIST 800-53 enhancement
  • NIST-CP-7(6) Inability to Return to Primary Site NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-CP Contingency Planning NIST 800-53 family

Referenced by Compliance · related control (16)

  • NIST-CM-6 Configuration Settings NIST 800-53 control
  • NIST-CP-10 System Recovery and Reconstitution NIST 800-53 control
  • NIST-CP-2 Contingency Plan NIST 800-53 control
  • NIST-CP-4(2) Alternate Processing Site NIST 800-53 enhancement
  • NIST-CP-6 Alternate Storage Site NIST 800-53 control
  • NIST-CP-8 Telecommunications Services NIST 800-53 control
  • NIST-CP-9(5) Transfer to Alternate Storage Site NIST 800-53 enhancement
  • NIST-CP-9(6) Redundant Secondary System NIST 800-53 enhancement
  • NIST-MA-6 Timely Maintenance NIST 800-53 control
  • NIST-PE-11 Emergency Power NIST 800-53 control
  • NIST-PE-12 Emergency Lighting NIST 800-53 control
  • NIST-PE-17 Alternate Work Site NIST 800-53 control
  • NIST-PE-3(3) Continuous Guards NIST 800-53 enhancement
  • NIST-RA-3 Risk Assessment NIST 800-53 control
  • NIST-SC-36 Distributed Processing and Storage NIST 800-53 control
  • NIST-SI-13(5) Failover Capability NIST 800-53 enhancement