id: "CP-10(02)" title: "Transaction Recovery" family: "CP" family_name: "Contingency Planning" sort_id: "cp-10.02" priority: "P2" implementation_level: "organization" parent: "CP-10" enhancement: True


Statement

Implement transaction recovery for systems that are transaction-based.

Guidance

Transaction-based systems include database management systems and transaction processing systems. Mechanisms supporting transaction recovery include transaction rollback and transaction journaling.

Assessment Objective

transaction recovery is implemented for systems that are transaction-based.

Contingency planning policy

procedures addressing system recovery and reconstitution

contingency plan

system design documentation

system configuration settings and associated documentation

contingency plan test documentation

contingency plan test results

system transaction recovery records

system audit records

system security plan

other relevant documents or records

Organizational personnel with responsibility for transaction recovery

organizational personnel with information security responsibilities

Mechanisms supporting and/or implementing transaction recovery capability