|

controlCP-7

Alternate Processing Site (CP-7)

Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [organization-defined] for essential mission and business functions within [organization-defined] when the primary processing capabilities are unavailable; Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfe

Security Baselines

MODERATEHIGHLOW

contingencydisaster-recoverybusiness-continuity

Why These Connect

Maps To4

These are equivalent or closely aligned requirements in other frameworks.

Baselined In2

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports18

These related controls work together — a change to one may affect the others.

Mitigates2

This control helps defend against or reduce the risk of the linked threat technique.

Enhances6

These enhancements add specific capabilities or refinements to the base control.

Related Controls(14)

CM-6Configuration Settings (CM-6)

CP-2Contingency Plan (CP-2)

CP-6Alternate Storage Site (CP-6)

CP-8Telecommunications Services (CP-8)

CP-9System Backup (CP-9)

CP-10System Recovery and Reconstitution (CP-10)

MA-6Timely Maintenance (MA-6)

PE-3Physical Access Control (PE-3)

PE-11Emergency Power (PE-11)

PE-12Emergency Lighting (PE-12)

PE-17Alternate Work Site (PE-17)

SC-36Distributed Processing and Storage (SC-36)SI-13Predictable Failure Prevention (SI-13)RA-3Risk Assessment (RA-3)

Threat Coverage(2 ATT&CK techniques)

T1486Data Encrypted for Impact T1485Data Destruction

Cross-Framework Mappings(4)

PR.IR-04PR.IR-04Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

ISO 27001ISO/IEC 27001:20223 mappingsFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

HIPAAHIPAA Security Rule2 mappingsFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

PR.IR-04PR.IR-04Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined system operations

Assignmentorganization-defined time period

Control Enhancements(6)

CP-7(1)Separation from Primary Site (CP-7(1))

CP-7(2)Accessibility (CP-7(2))

CP-7(3)Priority of Service (CP-7(3))

CP-7(4)Preparation for Use (CP-7(4))

CP-7(5)Equivalent Information Security Safeguards (CP-7(5))W

CP-7(6)Inability to Return to Primary Site (CP-7(6))

See Also

@SP 800-53 Overview ⚖Compare Baselines