NIST 800-53 Rev 5

424 controls available

CP-8(3)high

Separation of Primary and Alternate Providers

Contingency Planning

Control Statement

Obtain alternate telecommunications services from providers that are separated from primary service providers to reduce susceptibility to the same threats.

Discussion

Threats that affect telecommunications services are defined in organizational assessments of risk and include natural disasters, structural failures, cyber or physical attacks, and errors of omission or commission. Organizations can reduce common susceptibilities by minimizing shared infrastructure among telecommunications service providers and achieving sufficient geographic separation between services. Organizations may consider using a single service provider in situations where the service provider can provide alternate telecommunications services that meet the separation needs addressed in the risk assessment.

Framework
NIST SP 800-53 Rev 5
Family
Contingency Planning
Baselines
high

Related Frameworks

2 paths across 2 frameworks
SCF1 mapping
BCD-10.2Separation of Primary / Alternate Providers
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI1 mapping
CCI-000531
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent

Related STIGs

No STIGs in the current catalog reference any CCI mapped to this control.