CCI-002479
CCI-002479 Definition
Store organization-defined information in an offline secure location.
Status | |
Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed documents and implements a process to store information at rest defined in SC-28 (2), CCI 2477 in an off-line secure location.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the documented process and off-line storage records to ensure the organization being inspected/assessed stores information at rest defined in SC-28 (2), CCI 2477 in an off-line secure location.
Compelling Evidence
1.) Signed and dated System Security Plan (SSP). 2.) Backup Procedures documentation (reference 'information at rest/back up'' section).