SI-13(4)—Standby Component Installation And Notification
>Control Description
If system component failures are detected:
a. Ensure that the standby components are successfully and transparently installed within ⚙organization-defined time period; and
b. ☑Activate [Assignment: organization-defined alarm; Automatically shut down the system; ⚙organization-defined action].
>Supplemental Guidance
Automatic or manual transfer of components from standby to active mode can occur upon the detection of component failures.
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies and procedures govern standby component installation and notification?
- •Who is responsible for monitoring system and information integrity?
- •How frequently are integrity monitoring processes reviewed and updated?
Technical Implementation:
- •What technical controls detect and respond to standby component installation and notification issues?
- •How are integrity violations identified and reported?
- •What automated tools support system and information integrity monitoring?
Evidence & Documentation:
- •Can you provide recent integrity monitoring reports or alerts?
- •What logs demonstrate that SI-13(4) is actively implemented?
- •Where is evidence of integrity monitoring maintained and for how long?
Ask AI
Configure your API key to use AI features.