Navigate

SC-28 (2)

SC-28 (2): Off-Line Storage

The organization removes from online storage and stores off-line in a secure location [Assignment: organization-defined information].

Supplemental

Removing organizational information from online information system storage to off-line storage eliminates the possibility of individuals gaining unauthorized access to the information through a network. Therefore, organizations may choose to move information to off-line storage in lieu of protecting such information in online storage.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SC-28 (2).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SC-28 (2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-28 (2).

CCI	Definition
CCI-002477	The organization defines the information at rest to be removed from online storage and stored in an off-line secure location.
CCI-002478	The organization removes organization-defined information at rest from online storage.
CCI-002479	The organization stores organization-defined information at rest in an off-line secure location.