SI — SYSTEM AND INFORMATION INTEGRITY

SI-13: PREDICTABLE FAILURE PREVENTION

The organization:

a. Determines mean time to failure (MTTF) for [Assignment: organization-defined information system components] in specific environments of operation; and
b. Provides substitute information system components and a means to exchange active and standby components at [Assignment: organization-defined MTTF substitution criteria].

SUPPLEMENTAL GUIDANCE

While MTTF is primarily a reliability issue, this control addresses potential failures of specific information system components that provide security capability. Failure rates reflect installation-specific consideration, not industry-average. Organizations define criteria for substitution of information system components based on MTTF value with consideration for resulting potential harm from component failures. Transfer of responsibilities between active and standby components does not compromise safety, operational readiness, or security capability (e.g., preservation of state variables). Standby components remain available at all times except for maintenance issues or recovery failures in progress.

CONTROL ENHANCEMENTS

SI-13 (1) PREDICTABLE FAILURE PREVENTION | TRANSFERRING COMPONENT RESPONSIBILITIES

The organization takes information system components out of service by transferring component responsibilities to substitute components no later than [Assignment: organization-defined fraction or percentage] of mean time to failure.

Supplemental Guidance: NONE

SI-13 (2) PREDICTABLE FAILURE PREVENTION | TIME LIMIT ON PROCESS EXECUTION WITHOUT SUPERVISION

[Withdrawn: Incorporated into SI-7 (16)].

SI-13 (3) PREDICTABLE FAILURE PREVENTION | MANUAL TRANSFER BETWEEN COMPONENTS

The organization manually initiates transfers between active and standby information system components [Assignment: organization-defined frequency] if the mean time to failure exceeds [Assignment: organization-defined time period].

Supplemental Guidance: NONE

SI-13 (4) PREDICTABLE FAILURE PREVENTION | STANDBY COMPONENT INSTALLATION / NOTIFICATION

The organization, if information system component failures are detected:

(a) Ensures that the standby components are successfully and transparently installed within [Assignment: organization-defined time period]; and
(b) [Selection (one or more): activates [Assignment: organization-defined alarm]; automatically shuts down the information system].

Supplemental Guidance:

Automatic or manual transfer of components from standby to active mode can occur, for example, upon detection of component failures.

SI-13 (5) PREDICTABLE FAILURE PREVENTION | FAILOVER CAPABILITY

The organization provides [Selection: real-time; near real-time] [Assignment: organization-defined failover capability] for the information system.