id: "CP-06(02)" title: "Recovery Time and Recovery Point Objectives" family: "CP" family_name: "Contingency Planning" sort_id: "cp-06.02" priority: "P2" implementation_level: "organization" parent: "CP-06" enhancement: True


Statement

Configure the alternate storage site to facilitate recovery operations in accordance with recovery time and recovery point objectives.

Guidance

Organizations establish recovery time and recovery point objectives as part of contingency planning. Configuration of the alternate storage site includes physical facilities and the systems supporting recovery operations that ensure accessibility and correct execution.

Assessment Objective: the alternate storage site is configured to facilitate recovery operations in accordance with recovery time objectives;

Assessment Objective: the alternate storage site is configured to facilitate recovery operations in accordance with recovery point objectives.

Contingency planning policy

procedures addressing alternate storage sites

contingency plan

alternate storage site

alternate storage site agreements

alternate storage site configurations

system security plan

other relevant documents or records

Organizational personnel with contingency plan testing responsibilities

organizational personnel with responsibilities for testing related plans

organizational personnel with information security responsibilities

Organizational processes for contingency plan testing

mechanisms supporting recovery time and point objectives