GAISSF / D6 / D6-CTL-07

Ai Resilience & Business Continuity

Objective

Ensure AI availability under stress.

Control / requirement

Failover systems + degraded mode + RTO/RPO definition.

Business impact

Critical AI system outages can halt business operations, with estimated exposure of $1M-$10M per hour of downtime for financial trading or customer-facing AI.

Validation approach

Test ID: D6-CTL-07-VTS-001 Test Type: Manual (BCP test) Test Design: Simulate outage of critical AI system; verify failover or degraded-mode operation Execution Steps: 1. Identify critical AI system 2. Simulate outage 3. Measure failover time 4. Verify degraded mode & document RTO/RPO Pass Criteria: failover_activated_within_rto = True; degraded_mode_operational = True; rpo_achieved = True; annual_bcp_test_completed = True Independent Verification: Auditor observes BCP test and reviews results.

Expected evidence

Not separately specified in the available source.

Mapping and source

Not separately specified in the available source.

Implementation guidance

Translate the requirement into system-specific procedures, responsible roles, technical configurations and review conditions. Retain evidence showing both design and operating performance. Where the source provides no separate implementation instruction, do not infer that a single technical mechanism is sufficient.

Assessment considerations

  • Confirm scope and applicability.
  • Inspect control design and responsible ownership.
  • Test representative operation and adverse conditions where appropriate.
  • Evaluate evidence provenance, completeness and contradictory evidence.
  • Record limitations and notably absent outcomes.