SI-17: Fail-safe Procedures
Control Family:
Baselines:
- Low
N/A
- Moderate
N/A
- High
N/A
- Privacy
N/A
- OT Low (SP 800-82r3)
- SI-17
- OT Moderate (SP 800-82r3)
- SI-17
- OT High (SP 800-82r3)
- SI-17
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- SI-17: Fail-Safe Procedures
Control Statement
Implement the indicated fail-safe procedures when the indicated failures occur: [Assignment: organization-defined list of failure conditions and associated fail-safe procedures].
Supplemental Guidance
Failure conditions include the loss of communications among critical system components or between system components and operational facilities. Fail-safe procedures include alerting operator personnel and providing specific instructions on subsequent steps to take. Subsequent steps may include doing nothing, reestablishing system settings, shutting down processes, restarting the system, or contacting designated organizational personnel.
OT Discussion
The selected failure conditions and corresponding procedures may vary among baselines. The same failure event may trigger different responses, depending on the impact level. Mechanical and analog systems can be used to provide mechanisms to ensure fail-safe procedures. Fail-safe states should incorporate potential impacts to human safety, physical systems, and the environment. A related controls is CP-6.
OT Baseline Rationale
Rationale for adding to Low, Mod, High baselines: This control provides a structure for the organization to identify its policy and procedures for dealing with failures and other incidents. Creating a written record of the decision process for selecting incidents and appropriate responses in light of a changing environment of operations is part of risk management.