CP-7(2)—Alternate Processing Site | Accessibility

IL4 Mod

IL4 High

IL5

IL6

>Control Description

Identify potential accessibility problems to alternate processing sites in the event of an area-wide disruption or disaster and outlines explicit mitigation actions.

>DoD Impact Level Requirements

No specific parameter values or requirements for this impact level.

>Discussion

Area-wide disruptions refer to those types of disruptions that are broad in geographic scope with such determinations made by organizations based on organizational assessments of risk.

>Programmatic Queries

Beta

Related Services

AWS Route 53

AWS Global Accelerator

AWS VPN

CLI Commands

Create Route 53 failover routing policy

aws route53 change-resource-record-sets --hosted-zone-id Z123456 --change-batch file://failover.json

Create health check for alternate site

aws route53 create-health-check --health-check-config '{"Type":"HTTP","ResourcePath":"/health","FullyQualifiedDomainName":"alternate.example.com"}'

Create Global Accelerator for alternate site access

aws globalaccelerator create-accelerator --name cp-7-2-accelerator --enabled

Create Site-to-Site VPN for accessibility

aws ec2 create-vpn-connection-route --vpn-connection-id vpn-123456 --destination-cidr-block 10.0.0.0/8

Open AWS Console Documentation

>Related Controls

RA-3

>Assessment Interview Topics

Questions assessors commonly ask

Process & Governance:

•What formal policies and procedures govern the implementation of CP-7(2) (Accessibility)?
•Who are the designated roles responsible for implementing, maintaining, and monitoring CP-7(2)?
•How frequently is the CP-7(2) policy reviewed and updated, and what triggers policy changes?
•What governance structure ensures CP-7(2) requirements are consistently applied across all systems?

Technical Implementation:

•Describe the specific technical mechanisms or controls used to enforce CP-7(2) requirements.
•What automated tools, systems, or technologies are deployed to implement CP-7(2)?
•How is CP-7(2) integrated into your system architecture and overall security posture?
•What configuration settings, parameters, or technical specifications enforce CP-7(2) requirements?

Evidence & Documentation:

•What documentation demonstrates the complete implementation of CP-7(2)?
•What audit logs, records, reports, or monitoring data validate CP-7(2) compliance?
•Can you provide evidence of periodic reviews, assessments, or testing of CP-7(2) effectiveness?
•What artifacts would you present during a FedRAMP assessment to demonstrate CP-7(2) compliance?

Ask AI

Configure your API key to use AI features.