CFTC System Safeguards: Business Continuity and Disaster Recovery
CFTC System Safeguards (17 CFR 37, 38, 39, 49) CFTC-SS-10: Geographic Dispersal of Backup Infrastructure and Personnel
Where subject to the critical entity requirements, maintain infrastructure and personnel sufficient to meet the same day recovery objective that are located outside the relevant area and do not depend on the same critical transportation, telecommunications, power, water or other infrastructure components relied on for normal activities.
What else in your programme already covers this
This control maps to 33 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
CP-6(1) Alternate Storage Site | Separation from Primary Site. Identify an alternate storage site that is sufficiently separated from the primary storage site to reduce susceptibility to the same threats
CP-7(1) Alternate Processing Site | Separation from Primary Site. Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats
CP-6(1) Alternate Storage Site | Separation from Primary Site. Identify an alternate storage site that is sufficiently separated from the primary storage site to reduce susceptibility to the same threats
CP-7(1) Alternate Processing Site | Separation from Primary Site. Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats
CP-6(1) Alternate Storage Site | Separation from Primary Site. Identify an alternate storage site that is sufficiently separated from the primary storage site to reduce susceptibility to the same threats
CP-7(1) Alternate Processing Site | Separation from Primary Site. Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats
CP-6(1) Alternate Storage Site | Separation from Primary Site. Identify an alternate storage site that is sufficiently separated from the primary storage site to reduce susceptibility to the same threats
CP-7(1) Alternate Processing Site | Separation from Primary Site. Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats
You are reading one control. How much of CFTC System Safeguards (17 CFR 37, 38, 39, 49) have you already done?
CFTC System Safeguards (17 CFR 37, 38, 39, 49) CFTC-SS-10 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of CFTC System Safeguards (17 CFR 37, 38, 39, 49) your existing evidence covers. Hold NIST Cybersecurity Framework 2.0 and 28 of 39 CFTC System Safeguards (17 CFR 37, 38, 39, 49) controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 5 were rejected on the NIST Cybersecurity Framework 2.0 pair alone.