id: "SI-13(01)" title: "Transferring Component Responsibilities" family: "SI" family_name: "System and Information Integrity" sort_id: "si-13.01" priority: "P1" implementation_level: "organization" parent: "SI-13" enhancement: True
Statement
Take system components out of service by transferring component responsibilities to substitute components no later than {{ insert: param, si-13.01_odp }} of mean time to failure.
Guidance
Transferring primary system component responsibilities to other substitute components prior to primary component failure is important to reduce the risk of degraded or debilitated mission or business functions. Making such transfers based on a percentage of mean time to failure allows organizations to be proactive based on their risk tolerance. However, the premature replacement of system components can result in the increased cost of system operations.
Assessment Objective
system components are taken out of service by transferring component responsibilities to substitute components no later than {{ insert: param, si-13.01_odp }} of mean time to failure.
System and information integrity policy
system and information integrity procedures
procedures addressing predictable failure prevention
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Organizational personnel responsible for MTTF activities
organizational personnel with information security responsibilities
system/network administrators
organizational personnel with contingency planning responsibilities
Organizational processes for managing MTTF
automated mechanisms supporting and/or implementing the transfer of component responsibilities to substitute components