Back

Establish, implement, and maintain logical access controls at alternate facilities.


CONTROL ID
13227
CONTROL TYPE
Technical Security
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Prepare the alternate facility for an emergency offsite relocation., CC ID: 00744

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • sufficient segregation of IT assets pertaining to the Australian-regulated operations from other systems to allow their separation if required; and (Attachment B ΒΆ 17(b), The AD_offical_Name should be: APRA Prudential Practice Guide 234: Management of security risk in information and information technology, May 2013)
  • Determine whether appropriate physical and logical access controls have been considered and planned for the inactive production system when processing is temporarily transferred to an alternate facility. (TIER I OBJECTIVES AND PROCEDURES BCP - Security Issues Objective 7:2, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, February 2015)