Alternate Storage Site (CP-6)

| Show Notes
Created August 15, 2016
Revised September 1, 2016

Description

The location of the alternative storage site for information resources should not be subject to the same potential impact from a disaster at the University site.

Applicability

An alternate storage site is an integral part of a contingency plan and applies to all mission critical information resources, University Essential IT Services, and additional resources as noted.

The information resource owner or designee is responsible for determining how the alternate storage site is utilized.

Based on risk management considerations and business functions, the information resource owner may determine that it would be appropriate to apply the requirements of this Control to information resources not meeting the definition of mission critical.

Implementation

1

The alternate storage site is geographically separated from the primary storage site to reduce susceptibility to the same disruptive event.

Tip

The distance should be sufficient so an event would not impact both the primary and alternate storage site.

2

The alternate storage site is configured to facilitate timely and effective recovery operations.

3

A contingency plan shall identify potential accessibility problems to the alternate site in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.

4

Backup and recovery procedures, and associate testing at alternate storage sites, shall be implemented as described in CP-9 Information System Backup.