164.308(a)(7)(ii)(E) Applications and Data Criticality Analysis (Addressable)
Administrative safeguard · Addressable
The requirement as we hold it
Applications and Data Criticality Analysis (Addressable). Assess the relative criticality of applications and data in support of other contingency components. NIST recommends tiered classification driving backup, DR, and protection investments.
The examiner asks
- Show me how you rank the criticality of applications and data, and how that drives backup and recovery.
- Which systems are tier one, and why?
Evidence to bring
- the criticality analysis
- the tier assignment
Source: 164.308(a)(7)(ii)(E) at eCFR. Our statement of the clause, not the instrument verbatim.