The organization:
Establishes an alternate storage site including necessary agreements to permit the storage and retrieval of information system backup information; and
Ensures that the alternate storage site provides information security safeguards equivalent to that of the primary site.
