|

controlCP-7

Alternate Processing Site (CP-7)

Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [organization-defined] for essential mission and business functions within [organization-defined] when the primary processing capabilities are unavailable; Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfe

Security Baselines

MODERATEHIGHLOW

contingencydisaster-recoverybusiness-continuity

Why These Connect

Baselined In2

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports18

These related controls work together — a change to one may affect the others.

Mitigates2

This control helps defend against or reduce the risk of the linked threat technique.

Enhances6

These enhancements add specific capabilities or refinements to the base control.

Related Controls(14)

CM-6Configuration Settings (CM-6)

CP-2Contingency Plan (CP-2)

CP-6Alternate Storage Site (CP-6)

CP-8Telecommunications Services (CP-8)

CP-9System Backup (CP-9)

CP-10System Recovery and Reconstitution (CP-10)

MA-6Timely Maintenance (MA-6)

PE-3Physical Access Control (PE-3)

PE-11Emergency Power (PE-11)

PE-12Emergency Lighting (PE-12)

PE-17Alternate Work Site (PE-17)

SC-36Distributed Processing and Storage (SC-36)SI-13Predictable Failure Prevention (SI-13)RA-3Risk Assessment (RA-3)

Threat Coverage(2 ATT&CK techniques)

T1486Data Encrypted for Impact T1485Data Destruction

Control Enhancements(6)

CP-7(1)Separation from Primary Site (CP-7(1))

CP-7(2)Accessibility (CP-7(2))

CP-7(3)Priority of Service (CP-7(3))

CP-7(4)Preparation for Use (CP-7(4))

CP-7(5)Equivalent Information Security Safeguards (CP-7(5))W

CP-7(6)Inability to Return to Primary Site (CP-7(6))

See Also

@SP 800-53 Overview ⚖Compare Baselines