Back

Identify telecommunication facilities critical to the continuity of operations.


CONTROL ID
12732
CONTROL TYPE
Systems Continuity
CLASSIFICATION
Detective

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain organizational facility continuity plans., CC ID: 02224

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Communications facilities that are critical to continuity of network services should be identified. Single points of failure should be minimized by automatic re-routing of communications through alternate routes should critical nodes or links fail (e.g. routing critical links to more than one extern… (6.1.3, Hong Kong Monetary Authority: TM-G-1: General Principles for Technology Risk Management, V.1 – 24.06.03)
  • Communication lines. (App A Objective 4:2h, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • Inquiring about the physical paths used by telecommunications providers and verifying that system redundancies have been properly implemented. (App A Objective 6:6i, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • Understands the limitations of the entity's third-party telecommunications providers' infrastructure. (App A Objective 13:3b, FFIEC Information Technology Examination Handbook - Architecture, Infrastructure, and Operations, June 2021)