CP-6 Alternate Storage Site
Description
Alternate storage sites are sites that are geographically distinct from primary storage sites. An alternate storage site maintains duplicate copies of information and data in the event that the primary storage site is not available.
Items covered by alternate storage site agreements include, for example:
- environmental conditions at alternate sites,
- access rules,
- physical and environmental protection requirements, and
- coordination of delivery/retrieval of backup media.
Alternate storage sites reflect the requirements in contingency plans so that organizations can maintain essential missions/business functions despite disruption, compromise, or failure in organizational information systems.
Applicability
An alternate storage site is an integral part of a contingency plan and applies to all mission critical information resources, University Essential IT Services, and additional resources as noted.
The information resource owner or designee is responsible for determining how the alternate storage site is utilized.
Based on risk management considerations and business functions, the information resource owner may determine that it would be appropriate to apply the requirements of this Control to information resources not meeting the definition of mission critical.
Implementation
TAMU-CC shall:
- Establish an alternate storage site including necessary agreements to permit the storage and retrieval of information system backup information;
- Ensure that the alternate storage site provides information security safeguards equivalent to that of the primary site; and
- Ensure mission-critical information shall be backed up on a scheduled basis and stored off site in a secure, environmentally safe, locked facility accessible only to authorized TAMU-CC representatives.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019