id: "CP-10(02)" title: "Transaction Recovery" family: "CP" family_name: "Contingency Planning" sort_id: "cp-10.02" priority: "P2" implementation_level: "organization" parent: "CP-10" enhancement: True
Statement
Implement transaction recovery for systems that are transaction-based.
Guidance
Transaction-based systems include database management systems and transaction processing systems. Mechanisms supporting transaction recovery include transaction rollback and transaction journaling.
Assessment Objective
transaction recovery is implemented for systems that are transaction-based.
Contingency planning policy
procedures addressing system recovery and reconstitution
contingency plan
system design documentation
system configuration settings and associated documentation
contingency plan test documentation
contingency plan test results
system transaction recovery records
system audit records
system security plan
other relevant documents or records
Organizational personnel with responsibility for transaction recovery
organizational personnel with information security responsibilities
Mechanisms supporting and/or implementing transaction recovery capability