Skip to content

Alternate Processing Site

What is Alternate Processing Site?

A facility separate from the primary location where an organization can continue critical operations during a disruption to the main site.

Business Continuity

Frameworks that govern alternate processing site

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on alternate processing site

Requirements naming alternate processing site across 6 standards, quoted from the control text.

NIST SP 800-53 Rev 57 controls

Plan and prepare for circumstances that preclude returning to the primary processing site.

NIST800-CP-7(6) · CP-7(6) Alternate Processing Site | Inability to Return to Primary Site →
NIST SP 800-53 Rev 5 HIGH6 controls

Prepare the alternate processing site so that the site can serve as the operational site supporting essential mission and business functions.

nist-sp-800-53-revision-5-1-high::CP-7(4) · CP-7(4) Alternate Processing Site | Preparation for Use →
FedRAMP High5 controls

Establish alternate processing site with agreements for resumption of operations within FedRAMP-defined RTO.

CP-7 · Alternate Processing Site →
FBI CJIS Security Policy4 controls

Identify an alternate processing site sufficiently separated from the primary site to reduce susceptibility to the same threats.

fbi-cjis-security-policy::CP-7(1) · CP-7(1) Alternate Processing Site | Separation from Primary Site →
FedRAMP Moderate4 controls

Establish alternate processing site with agreements for resumption of operations within FedRAMP-defined RTO.

CP-7 · Alternate Processing Site →
NIST SP 800-53 Rev 5 MODERATE4 controls

Identify an alternate processing site that is sufficiently separated from the primary processing site to reduce susceptibility to the same threats.

nist-sp-800-53-rev-5-moderate::CP-7(1) · CP-7(1) Alternate Processing Site | Separation from Primary Site →

Questions people ask about alternate processing site

What is Alternate Processing Site?
A facility separate from the primary location where an organization can continue critical operations during a disruption to the main site.
Why is Alternate Processing Site important for compliance?
Alternate Processing Site is a key concept in Business Continuity. Understanding alternate processing site helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Alternate Processing Site?
Alternate Processing Site appears in the requirement text of NIST SP 800-53 Rev 5, NIST SP 800-53 Rev 5 HIGH, FedRAMP High, FBI CJIS Security Policy, FedRAMP Moderate. Across these standards we have identified 30 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Alternate Processing Site?
Explore our compliance framework pages to see how alternate processing site applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Alternate Processing Site applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.