{"data":{"id":"SI-13","name":"Predictable Failure Prevention","family":"SI","family_name":"System and Information Integrity","withdrawn":false,"description":"a. Determine mean time to failure (MTTF) for the following system components in specific environments of operation: [Assignment: organization-defined system components]; and\nb. Provide substitute system components and a means to exchange active and standby components in accordance with the following criteria: [Assignment: organization-defined MTTF substitution criteria].","supplemental_guidance":"While MTTF is primarily a reliability issue, predictable failure prevention is intended to address potential failures of system components that provide security capabilities. Failure rates reflect installation-specific consideration rather than the industry-average. Organizations define the criteria for the substitution of system components based on the MTTF value with consideration for the potential harm from component failures. The transfer of responsibilities between active and standby components does not compromise safety, operational readiness, or security capabilities. The preservation of system state variables is also critical to help ensure a successful transfer process. Standby components remain available at all times except for maintenance issues or recovery failures in progress.","enhancements":[{"id":"SI-13(01)","name":"Transferring Component Responsibilities","statement":"Take system components out of service by transferring component responsibilities to substitute components no later than [Assignment: organization-defined fraction or percentage] of mean time to failure.","baselines":[]},{"id":"SI-13(02)","name":"Time Limit on Process Execution Without Supervision","withdrawn":true,"incorporated_into":["SI-07(16)"]},{"id":"SI-13(03)","name":"Manual Transfer Between Components","statement":"Manually initiate transfers between active and standby system components when the use of the active component reaches [Assignment: organization-defined percentage] of the mean time to failure.","baselines":[]},{"id":"SI-13(04)","name":"Standby Component Installation and Notification","statement":"If system component failures are detected:\na. Ensure that the standby components are successfully and transparently installed within [Assignment: organization-defined time period]; and\nb. [Selection (one or more): Activate [Assignment: organization-defined alarm]; Automatically shut down the system; [Assignment: organization-defined action]].","baselines":[]},{"id":"SI-13(05)","name":"Failover Capability","statement":"Provide [Selection (one): real-time; near real-time] [Assignment: organization-defined failover capability] for the system.","baselines":[]}],"baseline_low":false,"baseline_moderate":false,"baseline_high":false,"nist_800_53":{"rev5":{"id":"SI-13","name":"Predictable Failure Prevention","description":"a. Determine mean time to failure (MTTF) for the following system components in specific environments of operation: [Assignment: organization-defined system components]; and\nb. Provide substitute system components and a means to exchange active and standby components in accordance with the following criteria: [Assignment: organization-defined MTTF substitution criteria].","discussion":"While MTTF is primarily a reliability issue, predictable failure prevention is intended to address potential failures of system components that provide security capabilities. Failure rates reflect installation-specific consideration rather than the industry-average. Organizations define the criteria for the substitution of system components based on the MTTF value with consideration for the potential harm from component failures. The transfer of responsibilities between active and standby components does not compromise safety, operational readiness, or security capabilities. The preservation of system state variables is also critical to help ensure a successful transfer process. Standby components remain available at all times except for maintenance issues or recovery failures in progress.","related_controls":["CP-02","CP-10","CP-13","MA-02","MA-06","SA-08","SC-06"],"baseline_low":null,"baseline_moderate":null,"baseline_high":null,"baseline_privacy":null,"new_in_rev5":false,"changes_from_rev4":"No significant title changes from Rev 4."}},"compliance_mappings":{"iso_27001_2022":[],"iso_27002_2022":[],"cobit_2019":["BAI04"],"pci_dss_v4":[],"nist_csf_2":["PR.IR-03"],"cis_controls_v8":[],"soc2_tsc":[],"finos_ccc":[],"iso_42001_2023":[],"iec_62443":[],"asd_e8":[],"nis2":[],"apra_cps_234":[],"mas_trm":["7"],"pra_op_resilience":[],"bsi_grundschutz":["DER.4"],"anssi":["SecNumCloud.13.3","SecNumCloud.18.1"],"osfi_b13":[],"finma_circular":["IV.A(28)","IV.A(29)","IV.E(89)"],"gdpr":[],"dora":["Art.7(1)","Art.9(2)"],"bio2":[],"rbi_csf":["ITGRCA.29"],"fisc":["FISC.O2","FISC.O13"],"lgpd_bcb":[],"hkma_tme1":["TME1.5.2","TME1.5.3"],"mlps_2":[],"dnb_good_practice":["DNB.11.4"],"cra":["CRA.I.2h"],"swift_cscf":[],"cbb_tm":["TM-5"],"cbuae":["CR-13"],"qatar_nia":["BC"],"bog_cisd":["CISD-BCM"],"cbe_csf":["OVM-2"],"cbn_csf":["Part3.7"],"sa_js2":["JS2-7.5"],"bcbs_239":["Principle 5"],"bot_cyber":["Ch4.2"],"eba_ict":["3.5(a)"],"sebi_cscrf":["PR.MA"],"nerc_cip":[],"nrc_73_54":[],"tsa_psd":[],"ieee_1686":[],"ferc_cip":[],"doe_c2m2":[],"api_1164":[],"awia":[],"iaea_nss":[],"pci_pts":[],"fips_140":[],"cbest":[],"tiber_eu":[],"pci_hsm":[],"common_criteria":[],"isae_3402":[],"fca_sysc_13":["SYSC 13.7.2","SYSC 13.8.2"],"fda_21_cfr_11":[],"fda_cyber":["SA-6"],"hitrust_csf":[],"iso_27799":[],"lloyds_ms":[],"naic_ds":[],"nhs_dspt":[],"pra_ss1_23":[],"solvency_ii":["EIOPA-ICT-4.8"],"owasp_masvs_v2":[],"csa_ccm_v4":[],"csa_aicm":[],"ccss_v9":[],"mica":["Art.62(5)","Art.68(5)"],"basel_sco60":[],"bssc":[],"sec_custody_digital":[],"dpdpa":[]},"attack_techniques":[],"metadata":{"last_reviewed":"2026-10-03","review_notes":"2026-10-03: nist_csf_2 PR.IR-03 added from NIST's CSF 2.0 to SP 800-53 Rev 5.2.0 crosswalk (OLIR entry 186), which OSA's mapping now takes as its base.","mapping_status":"complete"},"function":"corrective","used_by_patterns":["SP-034"]}}