The disaster recovery plan does not include the Sun Ray system (network infrastructure and peripherals).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-16414	SUN0280	SV-17407r1_rule	CODP-1 CODP-2 CODP-3	Medium

Description
If the disaster recovery plan does not include the Sun Ray system, recovering from a disaster would not be possible. All peripherals and necessary equipment must be included in the disaster recovery plan to ensure a successful restoration of data, servers, and clients are possible.

STIG	Date
Sun Ray 4 Policy STIG	2015-04-02

Details

Check Text ( C-17297r1_chk )
Ask for a copy of the site’s Continuity of Operations Planning (COOP). Verify the Sun Ray system is specifically mentioned in the plan. Ensure the plan addresses the restoration of the Sun Ray system within 24 hours of activation of the COOP. Additionally, ensure that the Sun Ray system restoration is validated at least annually as part of the normal COOP testing process. If any of these requirements is not met, this is a finding.

Check Text ( C-17297r1_chk )

Ask for a copy of the site’s Continuity of Operations Planning (COOP). Verify the Sun Ray system is specifically mentioned in the plan. Ensure the plan addresses the restoration of the Sun Ray system within 24 hours of activation of the COOP. Additionally, ensure that the Sun Ray system restoration is validated at least annually as part of the normal COOP testing process. If any of these requirements is not met, this is a finding.

Fix Text (F-16440r1_fix)
Add the Sun Ray system to the COOP.