CCI-000535

Conduct backups of user-level information contained in organization-defined system components per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Implementation Guidance

The organization being inspected/assessed must identify user level information within the backup strategy and configure the system to perform backups at least weekly as defined in the contingency plan.

Validation Procedures

The organization conducting the inspection/assessment obtains and reviews the backup strategy, and examines a sample of systems to ensure they are configured to perform back ups at least weekly as defined in the contingency plan.

Compelling Evidence

1.) Backup Strategy for user-level information 2.) Applicable STIG/SRG checks

The controls below (if any) were marked by NIST as being related to CCI-000535.