Title

System-level information must be backed up in accordance with local recovery time and recovery point objectives. (Cat III impact)

Discussion

Operating system backup is a critical step in maintaining data assurance and availability. System-level information includes system-state information, operating system and application software, and licenses. Backups must be consistent with organizational recovery time and recovery point objectives.

Check Content

Determine whether system-level information is backed up in accordance with local recovery time and recovery point objectives. If system-level information is not backed up in accordance with local recovery time and recovery point objectives, this is a finding.

Fix Text

Implement system-level information backups in accordance with local recovery time and recovery point objectives.

Additional Identifiers

Rule ID: SV-226041r794378_rule

Vulnerability ID: V-226041

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.