CCI-000538

Defines the frequency of conducting system documentation backups, including security-related documentation, to support recovery time objectives and recovery point objectives.

Implementation Guidance

DoD has defined the frequency as when created or received, when updated, and as required by system baseline configuration changes in accordance with the contingency plan.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as when created or received, when updated, and as required by system baseline configuration changes in accordance with the contingency plan.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-000538.