CP-8 Telecommunications Services
Description
Telecommunications services (for data and voice) for primary and alternate processing and storage sites are in scope for CP-8 . Alternate telecommunications services reflect the continuity requirements in contingency plans to maintain essential mission and business functions despite the loss of primary telecommunications services. Organizations may specify different time periods for primary or alternate sites. Alternate telecommunications services include additional organizational or commercial ground-based circuits or lines, network-based approaches to telecommunications, or the use of satellites. Organizations consider factors such as availability, quality of service, and access when entering into alternate telecommunications agreements.
An alternate storage site is an integral part of a contingency plan and applies to all mission critical information resources, University Essential IT Services, and additional resources as noted.
The information resource owner or designee is responsible for determining how the alternate storage site is utilized.
Based on risk management considerations and business functions, the information resource owner may determine that it would be appropriate to apply the requirements of this Control to information resources not meeting the definition of mission critical.
Applicability
The information resource owner, or designee, is responsible for ensuring that the risk mitigation measures described in this Control are implemented.
Implementation
Establish alternate telecommunications services, including necessary agreements to permit the resumption of system operations for essential mission and business functions within one hour when the primary telecommunications capabilities are unavailable at either the primary or alternate processing or storage sites.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019