Include a Business Impact Analysis in the acquisition feasibility study.

CONTROL ID
16231

CONTROL TYPE
Acquisition/Sale of Assets or Services

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Conduct an acquisition feasibility study prior to acquiring assets., CC ID: 01129

There are no implementation support Controls.

Table summarizes the criteria that can be employed to determine which type of alternate site meets the organization's requirements. Sites should be analyzed further by the organization, including considerations given to business impacts and downtime defined in the BIA. As sites are evaluated, the IS… (§ 3.4.3 ¶ 6, NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, Rev. 1 (Final))