UCF STIG Viewer Logo

The disaster recovery plan does not include the Sun Ray system (network infrastructure and peripherals).


Finding ID Version Rule ID IA Controls Severity
V-16414 SUN0280 SV-17407r1_rule CODP-1 CODP-2 CODP-3 Medium
If the disaster recovery plan does not include the Sun Ray system, recovering from a disaster would not be possible. All peripherals and necessary equipment must be included in the disaster recovery plan to ensure a successful restoration of data, servers, and clients are possible.
Sun Ray 4 Policy STIG 2015-04-02


Check Text ( C-17297r1_chk )
Ask for a copy of the site’s Continuity of Operations Planning (COOP). Verify the Sun Ray system is specifically mentioned in the plan. Ensure the plan addresses the restoration of the Sun Ray system within 24 hours of activation of the COOP. Additionally, ensure that the Sun Ray system restoration is validated at least annually as part of the normal COOP testing process. If any of these requirements is not met, this is a finding.
Fix Text (F-16440r1_fix)
Add the Sun Ray system to the COOP.