id: "SI-17" title: "Fail-safe Procedures" family: "SI" family_name: "System and Information Integrity" sort_id: "si-17" priority: "P1" implementation_level: "system"
Statement
Implement the indicated fail-safe procedures when the indicated failures occur: {{ insert: param, si-17_prm_1 }}.
Guidance
Failure conditions include the loss of communications among critical system components or between system components and operational facilities. Fail-safe procedures include alerting operator personnel and providing specific instructions on subsequent steps to take. Subsequent steps may include doing nothing, reestablishing system settings, shutting down processes, restarting the system, or contacting designated organizational personnel.
Assessment Objective
{{ insert: param, si-17_odp.01 }} are implemented when {{ insert: param, si-17_odp.02 }} occur.
System and information integrity policy
system and information integrity procedures
documentation addressing fail-safe procedures for the system
system design documentation
system configuration settings and associated documentation
list of security safeguards protecting the system memory from unauthorized code execution
system audit records
system security plan
other relevant documents or records
Organizational personnel responsible for fail-safe procedures
organizational personnel with information security responsibilities
system/network administrators
system developer
Organizational fail-safe procedures
automated mechanisms supporting and/or implementing fail-safe procedures