myctrl.tools
Compare

SC-47Alternate Communications Paths

>Control Description

Establish organization-defined alternate communications paths for system operations organizational command and control.

>Cross-Framework Mappings

>Supplemental Guidance

An incident, whether adversarial- or nonadversarial-based, can disrupt established communications paths used for system operations and organizational command and control. Alternate communications paths reduce the risk of all communications paths being affected by the same incident. To compound the problem, the inability of organizational officials to obtain timely information about disruptions or to provide timely direction to operational elements after a communications path incident, can impact the ability of the organization to respond to such incidents in a timely manner.

Establishing alternate communications paths for command and control purposes, including designating alternative decision makers if primary decision makers are unavailable and establishing the extent and limitations of their actions, can greatly facilitate the organization's ability to continue to operate and take appropriate actions during an incident.

>Related Controls

>Assessment Interview Topics

Questions assessors commonly ask

Process & Governance:

  • What policies govern the implementation of alternate communications paths?
  • How are system and communications protection requirements defined and maintained?
  • Who is responsible for configuring and maintaining the security controls specified in SC-47?

Technical Implementation:

  • How is alternate communications paths technically implemented in your environment?
  • What systems, tools, or configurations enforce this protection requirement?
  • How do you ensure that alternate communications paths remains effective as the system evolves?

Evidence & Documentation:

  • What documentation demonstrates the implementation of SC-47?
  • Can you provide configuration evidence or system diagrams showing this protection control?
  • What logs or monitoring data verify that this control is functioning correctly?

Ask AI

Configure your API key to use AI features.