ISO 27701:2019
PIMS-specific guidance related to ISO/IEC 27002, ISO 27701:2019

ISO 27701:2019 6.14.2: Redundancies

Availability of information processing facilities through redundancy applies as the base guidance requires, read as covering the facilities that process personal data.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 21 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 4 controls

SOC 2 · 3 controls

  • SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure
  • SOC2-A1.3 A1.3 Testing recovery plan procedures
  • SOC2-CC5.2 CC5.2 General controls over technology (COSO principle 11)

FedRAMP High · 2 controls

  • CP-7 Alternate Processing Site
  • CP-8(2) Telecommunications Services | Single Points of Failure (CP-8(2))

FedRAMP Moderate · 2 controls

  • CP-7 Alternate Processing Site
  • CP-8(2) Telecommunications Services | Single Points of Failure (CP-8(2))

ISO 27001:2022 · 2 controls

  • 5.29 Information security during disruption
  • 8.14 Redundancy of information processing facilities

ISO 27002:2022 · 2 controls

  • 5.30 ICT readiness for business continuity
  • 8.14 Redundancy of information processing facilities

NIST SP 800-161 Rev 1 · 2 controls

C5 (Germany) · 1 control

CMMC 2.0 · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in PIMS-specific guidance related to ISO/IEC 27002, ISO 27701:2019

You are reading one control. How much of ISO 27701:2019 have you already done?

ISO 27701:2019 6.14.2 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27701:2019 your existing evidence covers. Hold SOC 2 and 58 of 108 ISO 27701:2019 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 289 were rejected on the SOC 2 pair alone.

Query this from an agent

The graph holds this control, the 21 it maps to, and the evidence behind each claim, over MCP and REST.