Detections
Analytics

800-53|CP-8

Title

TELECOMMUNICATIONS SERVICES

Description

The organization establishes alternate telecommunications services including necessary agreements to permit the resumption of [Assignment: organization-defined information system operations] for essential missions and business functions within [Assignment: organization-defined time period] when the primary telecommunications capabilities are unavailable at either the primary or alternate processing or storage sites.

Supplemental

This control applies to telecommunications services (data and voice) for primary and alternate processing and storage sites. Alternate telecommunications services reflect the continuity requirements in contingency plans to maintain essential missions/business functions despite the loss of primary telecommunications services. Organizations may specify different time periods for primary/alternate sites. Alternate telecommunications services include, for example, additional organizational or commercial ground-based circuits/lines or satellites in lieu of ground-based communications. Organizations consider factors such as availability, quality of service, and access when entering into alternate telecommunications agreements.

Reference Item Details

Related: CP-2,CP-6,CP-7

Category: CONTINGENCY PLANNING

Family: CONTINGENCY PLANNING

Priority: P1

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2 Ensure security contact information is registeredamazon_awsCIS Amazon Web Services Foundations L1 3.0.0
ARST-L2-000200 - The Arista MLS layer 2 switch must not use the default VLAN for management traffic.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-RT-000690 - The Arista BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000700 - The MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000730 - The PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000740 - The PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000750 - The PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000760 - The PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000770 - The Arista Multicast Source Discovery Protocol (MSDP) router must be configured to use its loopback address as the source address when originating MSDP traffic.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
CISC-L2-000240 - The Cisco switch must not use the default VLAN for management traffic.CiscoDISA STIG Cisco IOS XE Switch L2S v3r1
CISC-L2-000240 - The Cisco switch must not use the default VLAN for management traffic.CiscoDISA STIG Cisco IOS Switch L2S v3r1
CISC-L2-000240 - The Cisco switch must not use the default VLAN for management traffic.CiscoDISA STIG Cisco NX-OS Switch L2S v3r2
CISC-RT-000580 - The Cisco BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000580 - The Cisco BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000580 - The Cisco BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000580 - The Cisco BGP switch must be configured to use its loopback address as the source address for iBGP peering sessions.CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000590 - The Cisco MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000590 - The Cisco MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000590 - The Cisco MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000590 - The Cisco MPLS switch must be configured to use its loopback address as the source address for LDP peering sessions.CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000630 - The Cisco PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000630 - The Cisco PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000630 - The Cisco PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000630 - The Cisco PE switch must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000640 - The Cisco PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000640 - The Cisco PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000640 - The Cisco PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000640 - The Cisco PE switch must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000650 - The Cisco PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000650 - The Cisco PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000650 - The Cisco PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000650 - The Cisco PE switch must be configured to have each VRF with the appropriate Route Distinguisher (RD).CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000670 - The Cisco PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate pseudowire ID for each attachment circuit.CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000670 - The Cisco PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000670 - The Cisco PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000670 - The Cisco PE switch providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000680 - The Cisco PE switch providing Virtual Private LAN Services (VPLS) must be configured to have all attachment circuits defined to the virtual forwarding instance (VFI) with the globally unique VPN ID assigned for each customer VLAN.CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
CISC-RT-000950 - The Cisco Multicast Source Discovery Protocol (MSDP) router must be configured to use a loopback address as the source address when originating MSDP traffic.CiscoDISA STIG Cisco IOS Router RTR v3r2
CISC-RT-000950 - The Cisco Multicast Source Discovery Protocol (MSDP) router must be configured to use a loopback address as the source address when originating MSDP traffic.CiscoDISA STIG Cisco IOS-XR Router RTR v3r2
CISC-RT-000950 - The Cisco Multicast Source Discovery Protocol (MSDP) router must be configured to use a loopback address as the source address when originating MSDP traffic.CiscoDISA STIG Cisco IOS XE Router RTR v3r2
CISC-RT-000950 - The Cisco Multicast Source Discovery Protocol (MSDP) switch must be configured to use a loopback address as the source address when originating MSDP traffic.CiscoDISA STIG Cisco NX-OS Switch RTR v3r2
JUNI-RT-000560 - The Juniper BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000570 - The Juniper MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000610 - The Juniper PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000620 - The Juniper PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT) - RT.JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000630 - The Juniper PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000650 - The Juniper PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000660 - The Juniper PE router providing Virtual Private LAN Services (VPLS) must be configured to have all attachment circuits defined to the routing instance with the globally unique VPLS ID assigned for each customer VLAN.JuniperDISA STIG Juniper Router RTR v3r1
JUNI-RT-000940 - The Juniper Multicast Source Discovery Protocol (MSDP) router must be configured to use its loopback address as the source address when originating MSDP traffic.JuniperDISA STIG Juniper Router RTR v3r1