Title

System-related documentation must be backed up in accordance with local recovery time and recovery point objectives. (Cat III impact)

Discussion

Operating system backup is a critical step in maintaining data assurance and availability. Information system and security-related documentation contains information pertaining to system configuration and security settings. Backups shall be consistent with organizational recovery time and recovery point objectives.

Check Content

Determine whether system-related documentation is backed up in accordance with local recovery time and recovery point objectives. If system-related documentation is not backed up in accordance with local recovery time and recovery point objectives, this is a finding.

Fix Text

Back up system-related documentation in accordance with local recovery time and recovery point objectives.

Additional Identifiers

Rule ID:

Vulnerability ID: V-40173

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.