myctrl.tools
Compare

SI-13(5)—Failover Capability

>Control Description

Provide ☑real-time; near real-time ⚙organization-defined failover capability for the system.

>Supplemental Guidance

Failover refers to the automatic switchover to an alternate system upon the failure of the primary system. Failover capability includes incorporating mirrored system operations at alternate processing sites or periodic data mirroring at regular intervals defined by the recovery time periods of organizations.

>Related Controls

CP-6
CP-7
CP-9

>Assessment Interview Topics

Questions assessors commonly ask

Process & Governance:

  • •What policies and procedures govern failover capability?
  • •Who is responsible for monitoring system and information integrity?
  • •How frequently are integrity monitoring processes reviewed and updated?

Technical Implementation:

  • •What technical controls detect and respond to failover capability issues?
  • •How are integrity violations identified and reported?
  • •What automated tools support system and information integrity monitoring?

Evidence & Documentation:

  • •Can you provide recent integrity monitoring reports or alerts?
  • •What logs demonstrate that SI-13(5) is actively implemented?
  • •Where is evidence of integrity monitoring maintained and for how long?

Ask AI

Configure your API key to use AI features.