FedRAMP Controls / CP

CP-7 Alternate Processing Site

Family CP
Baselines moderate
Mapped KSIs 1

Control statement

a. Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of {{ insert: param, cp-07_odp.01 }} for essential mission and business functions within {{ insert: param, cp-07_odp.02 }} when the primary processing capabilities are unavailable;
    b. Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfer and resumption; and
    c. Provide controls at the alternate processing site that are equivalent to those at the primary site.
        (a) Requirement: The service provider defines a time period consistent with the recovery time objectives and business impact analysis.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-RPL-02Recovery Plan
_Persistently_ review the alignment of recovery plans with defined recovery objectives.
Recovery Planning