The organization obtains maintenance support and/or spare parts for [Assignment: organization-defined information system components] within [Assignment: organization-defined time period] of failure.
Not appropriate for DoD to define for all CSP's infrastructure or service offerings
Within 24 hours (Low and Moderate Availability) or immediately upon failure for (High Availability)
DoD RMF TAG
Organizations specify the information system components that result in increased risk to organizational operations and assets, individuals, other organizations, or the Nation when the functionality provided by those components is not operational. Organizational actions to obtain maintenance support typically include having appropriate contracts in place.