id: "CP-07(03)" title: "Priority of Service" family: "CP" family_name: "Contingency Planning" sort_id: "cp-07.03" priority: "P2" implementation_level: "organization" parent: "CP-07" enhancement: True


Statement

Develop alternate processing site agreements that contain priority-of-service provisions in accordance with availability requirements (including recovery time objectives).

Guidance

Priority of service agreements refer to negotiated agreements with service providers that ensure that organizations receive priority treatment consistent with their availability requirements and the availability of information resources for logical alternate processing and/or at the physical alternate processing site. Organizations establish recovery time objectives as part of contingency planning.

Assessment Objective

alternate processing site agreements that contain priority-of-service provisions in accordance with availability requirements (including recovery time objectives) are developed.

Contingency planning policy

procedures addressing alternate processing sites

contingency plan

alternate processing site agreements

service-level agreements

system security plan

other relevant documents or records

Organizational personnel with contingency plan alternate processing site responsibilities

organizational personnel with system recovery responsibilities

organizational personnel with information security responsibilities

organizational personnel with responsibility for acquisitions/contractual agreements