CP-9(5) Transfer to Alternate Storage Site
Control enhancement of CP-9 System Backup
Control
Transfer system backup information to the alternate storage site [Assignment: organization-defined time period and transfer rate consistent with the recovery time and recovery point objectives].
Discussion
System backup information can be transferred to alternate storage sites either electronically or by the physical shipment of storage media.
Related controls
Need CP-9(5) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.