NIST 800-53 REV 5 • CONTINGENCY PLANNING
CP-2(6) — Alternate Processing and Storage Sites
Plan for the transfer of {{ insert: param, cp-02.06_odp }} mission and business functions to alternate processing and/or storage sites with minimal or no loss of operational continuity and sustain that continuity through system restoration to primary processing and/or storage sites.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
Organizations may choose to conduct contingency planning activities for alternate processing and storage sites as part of business continuity planning or business impact analyses. Primary processing and/or storage sites defined by organizations as part of contingency planning may change depending on the circumstances associated with the contingency.
Practitioner Notes
This enhancement requires your contingency plan to address alternate processing and storage sites specifically — where will you operate if your primary location is unavailable?
Example 1: Document your Azure paired region or secondary data center as your alternate processing site, including the procedures to activate it and redirect users.
Example 2: Establish an agreement with a colocation provider for emergency rack space and document the procedures for shipping and installing backup equipment at the alternate site.