Title

Backups of system-level information must be protected. (Cat III impact)

Discussion

A system backup will usually include sensitive information such as user accounts that could be used in an attack. As a valuable system resource, the system backup must be protected and stored in a physically secure location.

Check Content

Determine if system-level information backups are protected from destruction and stored in a physically secure location. If they are not, this is a finding.

Fix Text

Ensure system-level information backups are stored in a secure location and protected from destruction.

Additional Identifiers

Rule ID:

Vulnerability ID: V-40172

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.