Recommendation Contents
OIG recommends that the system owners, in coordination with Chief Information Officer and the Bureau of Information Resource Management, Office of Information Assurance, perform and review contingency plan testing annually, including validating system backups and establishing an alternate site strategy in accordance with the Foreign Affairs Manual (5 FAM 1064), National Institute of Standards and Technology (NIST) Special Publication (SP) 800-34, Revision 1, and NIST SP 800-53, Revision 3.
