id: "SC-24" title: "Fail in Known State" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-24" priority: "P1" implementation_level: "system"
Statement
Fail to a {{ insert: param, sc-24_odp.02 }} for the following failures on the indicated components while preserving {{ insert: param, sc-24_odp.03 }} in failure: {{ insert: param, sc-24_odp.01 }}.
Guidance
Failure in a known state addresses security concerns in accordance with the mission and business needs of organizations. Failure in a known state prevents the loss of confidentiality, integrity, or availability of information in the event of failures of organizational systems or system components. Failure in a known safe state helps to prevent systems from failing to a state that may cause injury to individuals or destruction to property. Preserving system state information facilitates system restart and return to the operational mode with less disruption of mission and business processes.
Assessment Objective
{{ insert: param, sc-24_odp.01 }} fail to a {{ insert: param, sc-24_odp.02 }} while preserving {{ insert: param, sc-24_odp.03 }} in failure.
System and communications protection policy
procedures addressing system failure to known state
system design documentation
system configuration settings and associated documentation
list of failures requiring system to fail in a known state
state information to be preserved in system failure
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developer
Mechanisms supporting and/or implementing the fail in known state capability
mechanisms preserving system state information in the event of a system failure