NIST 800-53 REV 5 • CONTINGENCY PLANNING
CP-7(3) — Priority of Service
Develop alternate processing site agreements that contain priority-of-service provisions in accordance with availability requirements (including recovery time objectives).
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
Priority of service agreements refer to negotiated agreements with service providers that ensure that organizations receive priority treatment consistent with their availability requirements and the availability of information resources for logical alternate processing and/or at the physical alternate processing site. Organizations establish recovery time objectives as part of contingency planning.
Practitioner Notes
This enhancement addresses priority of service agreements with your alternate processing site provider — ensuring you get priority access when multiple customers need the facility simultaneously.
Example 1: Include priority of service clauses in your contract with your disaster recovery provider, guaranteeing that your organization gets first access during a regional event.
Example 2: For cloud services, choose a Reserved Instance or Dedicated Host model for your disaster recovery environment to ensure capacity is available when you need it.