Title

The DSN local system must be backed up weekly on a removable device or media and stored off-site. (Cat II impact)

Discussion

System backups must be taken frequently (weekly at a minimum) and stored in such a way that a current copy can be obtained if needed. By storing a copy on the local system and a copy on removable media, in most instances, a copy can be used to restore the system. The storage of a copy off-site improves the safety of the copy in the event of a catastrophe at the operations site.

Check Content

Review site documentation to confirm the local DSN system is backed up weekly onto a removable device or media and stored off-site. When feasible, a copy of the backup should be kept on the system. If the local DSN system is not backed up weekly onto a removable device or media and stored off-site, this is a finding.

Fix Text

Implement and document backing up the local DSN system weekly onto a removable device or media and storing off-site. When technically feasible, configure the system to automatically perform weekly backups and record them locally on the system and on removable media. Alternately, ensure that weekly backups are performed manually. Ensure removable media is removed and stored off-site. Storing a copy on the system is highly recommended. Perform a system backup just prior to any system change, maintenance, or upgrade. If this is not feasible, the most recent weekly backup must be available for use.

Additional Identifiers

Rule ID: SV-8470r2_rule

Vulnerability ID: V-7984

Group Title: System backup weekly

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.