SC-24

System and Communications ProtectionRev 5system

Fail in Known State

Baselines:High

Control Statement

Fail to a [Assignment: known system state] for the following failures on the indicated components while preserving [Assignment: system state information] in failure: [Assignment: types of system failures on system components].

Supplemental Guidance

Failure in a known state addresses security concerns in accordance with the mission and business needs of organizations. Failure in a known state prevents the loss of confidentiality, integrity, or availability of information in the event of failures of organizational systems or system components. Failure in a known safe state helps to prevent systems from failing to a state that may cause injury to individuals or destruction to property. Preserving system state information facilitates system restart and return to the operational mode with less disruption of mission and business processes.

Related Controls (8)

CP-2 CP-4 CP-10 CP-12 SA-8 SC-7 SC-22 SI-13

CCI Identifiers (5)

CCI-001191Defines the known system state the system should fail to in the event of an organization-defined system failure.CCI-001665Preserve organization-defined system state information in the event of a system failure.CCI-001190Fail to an organization-defined known-system state for the list of organization-defined types of system failures on organization-defined system components on the indicated components while preserving organization-defined system state information in failure.CCI-001192Defines types of system failures for which should fail to an organization-defined known system state.CCI-001193Defines system state information that should be preserved in the event of a system failure.

Linked STIG Checks (142)

Across 105 STIGs. Click to expand.