{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-BCDR-04","description":"Implement redundancy and alternate capability sufficient to meet availability and recovery objectives: an alternate storage site for backup media, alternate processing capability sufficiently separated from the primary site to avoid shared hazards, and diverse or alternate telecommunications services with priority-of-service provisions. Ensure alternate facilities provide security controls equivalent to the primary site and can assume operations within recovery time objectives.","details":{"control_category":"technical","control_type":"corrective","domain":"Business Continuity & Disaster Recovery","guidance":[],"members":[{"control_id":"CP-6","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"CP-7","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"CP-8","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"PR.IR-03","coverage":"partial","delta":"in-situ / normal-operations resilience mechanisms (load balancing, failover, hot-swap, graceful degradation) beyond alternate-site/redundant capacity","framework":"nist-csf-2","relationship":"intersects_with"},{"control_id":"A.8.14","coverage":"full","framework":"iso-27001","relationship":"superset_of"}],"statement":"Implement redundancy and alternate capability sufficient to meet availability and recovery objectives: an alternate storage site for backup media, alternate processing capability sufficiently separated from the primary site to avoid shared hazards, and diverse or alternate telecommunications services with priority-of-service provisions. Ensure alternate facilities provide security controls equivalent to the primary site and can assume operations within recovery time objectives.","title":"Provide redundant and alternate processing, storage, and telecom","unified_id":"UC-BCDR-04"},"id":"uc:UC-BCDR-04","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-BCDR-04","sourceIds":["iso-27001","nist-800-53","nist-csf-2"],"sourceUrl":null,"title":"UC-BCDR-04 — Provide redundant and alternate processing, storage, and telecom","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3505ffd7e10a74b68fcaf9e9b6f95e041d87473eb04ec1aa6afd6a4ef17a8c42","properties":{"rationale":"an alternate site separated to avoid shared hazards sustains operations if the primary is damaged","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-phys-damage-physical-assets-disaster-23118626.json","targetId":"risk:phys-damage-physical-assets-disaster","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:713699d87a6b1abd2391beb625188e5f9d514def4a4abe0df2abda782eebbd0a","properties":{},"sourceDetailPath":"/data/v1/records/wf-c14-c6170cdd.json","sourceId":"wf:C14","targetDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","targetId":"uc:UC-BCDR-04","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:756e56aa28d97bf259c164c3a495b12aa99c615b674fb0906739098afb29070a","properties":{"control_id":"A.8.14","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-14-3901c4da.json","targetId":"ctrl:iso-27001:A.8.14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:897f92ddfe4af773ce88113a116b2ae70486a867472808c6a8d3c03f5ca9e0d2","properties":{"rationale":"redundant/alternate capability that assumes operations within RTO directly reduces outage impact","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9c544fb4dc383e2394d7ae00893dac34a6d179eee459ef92b77c46c7e7488f46","properties":{"rationale":"redundant/alternate processing and storage maintain availability when equipment fails","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-tech-hardware-equipment-failure-25948451.json","targetId":"risk:tech-hardware-equipment-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a31b7fa6c02dd59655a44667ab9a253cbd1d31c1aa14cd2352fcb0aeb1e042ae","properties":{},"sourceDetailPath":"/data/v1/records/wf-c9-75fb1752.json","sourceId":"wf:C9","targetDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","targetId":"uc:UC-BCDR-04","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a47f3f7b2dfbb3075e0358dd9ac6f6484749dfe40fd359d34278634b69ef06a9","properties":{"rationale":"geographic separation of the alternate site preserves operations through a regional climate event","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-esg-climate-physical-210261c0.json","targetId":"risk:esg-climate-physical","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b534b5db478171edb0506e9fedd3f76a28ed2f9e844861c83ae7222bc1786546","properties":{"rationale":"alternate sites, separated processing, and diverse telecom directly remove single points of failure","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b629f8d061085f7ff2aab62211dc5c60c72b7180db449dd79eaa9f7e3ea6ce87","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","targetId":"uc:UC-BCDR-04","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:cef009418dd209296a5536bef4f3ea2ed698d83ab27d7147585bfe22c8a477fa","properties":{"control_id":"CP-8","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-cp-8-cc006118.json","targetId":"ctrl:nist-800-53:CP-8","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d7e6aee5950eb914aa98eef2f0c6bf4a43b45bdd826223704c816abe8e5525fa","properties":{"control_id":"PR.IR-03","coverage":"partial","delta":"in-situ / normal-operations resilience mechanisms (load balancing, failover, hot-swap, graceful degradation) beyond alternate-site/redundant capacity","framework":"nist-csf-2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2.0"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/ctrl-nist-csf-2-pr-ir-03-da89f010.json","targetId":"ctrl:nist-csf-2:PR.IR-03","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dd37b54a97d7a95a246a6ff755255a6880b917586da6259561c950566b3787b3","properties":{"control_id":"CP-7","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-cp-7-b42f3ba9.json","targetId":"ctrl:nist-800-53:CP-7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ddb0646430e762b2edd17c5ab6751bb80c3cb89ba0766edd3f89033aacc36cd0","properties":{"control_id":"CP-6","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-cp-6-8b2868ea.json","targetId":"ctrl:nist-800-53:CP-6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:efc79cae92aa47fcf3c110f3d00d4b2d32371916625124c871ead87868399cfb","properties":{},"sourceDetailPath":"/data/v1/records/wf-c58-49a2df23.json","sourceId":"wf:C58","targetDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","targetId":"uc:UC-BCDR-04","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f94960c354a660bb5cd5ffb79eea7a511ea107e3556cc67959b10c9296f2bf47","properties":{"rationale":"diverse/alternate telecommunications and an alternate processing site offset loss of telecoms and power","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-tech-loss-essential-services-b7feae05.json","targetId":"risk:tech-loss-essential-services","type":"mitigates"}],"schemaVersion":1}