Description
The organization identifies an alternate processing site and initiates necessary agreements to permit the resumption of information system operations for critical mission/business functions within [Assignment: organization-defined time period] when the primary processing capabilities are unavailable.
Supplemental Guidance
Equipment and supplies required to resume operations within the organization-defined time period are either available at the alternate site or contracts are in place to support delivery to the site. Timeframes to resume information system operations are consistent with organization-established recovery time objectives.
Changes from Rev 4
Control text changes from 'information security safeguards' to 'controls' Discussion expands on controls that are covered by alternate processing site agreements
MITRE ATT&CK Techniques (16)
ATT&CK v16.1Techniques mitigated by this control, mapped via CTID.