Title

Backup of SharePoint system level files for critical systems must be performed when identified as required by the owning organization. (Cat II impact)

Discussion

Information system backup is a critical step in maintaining data assurance and availability. System-level information includes: system-state information, operating system and application software, and licenses.

Check Content

1. Verify the SharePoint farm servers, particularly those designated as critical information systems, are backed up periodically on a schedule identified by the DAA or designated representative. 2. Mark as a finding if backup is not performed or is not performed in compliance with required frequency.

Fix Text

Backup SharePoint farm servers, particularly those designated as critical information systems periodically on a schedule identified by the DAA or designated representative.

Additional Identifiers

Rule ID: SV-36698r1_rule

Vulnerability ID: V-28177

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.