id: "CP-09(01)" title: "Testing for Reliability and Integrity" family: "CP" family_name: "Contingency Planning" sort_id: "cp-09.01" priority: "P2" implementation_level: "organization" parent: "CP-09" enhancement: True
Statement
Test backup information {{ insert: param, cp-9.1_prm_1 }} to verify media reliability and information integrity.
Guidance
Organizations need assurance that backup information can be reliably retrieved. Reliability pertains to the systems and system components where the backup information is stored, the operations used to retrieve the information, and the integrity of the information being retrieved. Independent and specialized tests can be used for each of the aspects of reliability. For example, decrypting and transporting (or transmitting) a random sample of backup files from the alternate storage or backup site and comparing the information to the same information at the primary processing site can provide such assurance.
Assessment Objective: backup information is tested {{ insert: param, cp-09.01_odp.01 }} to verify media reliability;
Assessment Objective: backup information is tested {{ insert: param, cp-09.01_odp.02 }} to verify information integrity.
Contingency planning policy
procedures addressing system backup
contingency plan
system backup test results
contingency plan test documentation
contingency plan test results
system security plan
other relevant documents or records
Organizational personnel with system backup responsibilities
organizational personnel with information security responsibilities
Organizational processes for conducting system backups
mechanisms supporting and/or implementing system backups