2.1.5 Point-in-Time Recovery

Information

With binlogs it is possible to implement point-in-time recovery. This makes it possible to restore the changes between the last full backup and the point-in-time.

Enabling binlogs is not sufficient. The binlogs need to be backed up to separate media. The restore procedure should be created and tested. The data in the binlog files may contain sensitive information which needs be stored in the proper location with restrictive permissions and may require encryption.

Rationale:

Using binlogs can reduce the amount of information lost when recovering from a backup.

Impact:

Binlogs can grow quite large and take up a large amount of space so auto remove needs to be put into place.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Enable binlogs and create and test a restore procedure.

See Also

https://workbench.cisecurity.org/files/3848

Item Details

Category: CONTINGENCY PLANNING

References: 800-53|CP-9, 800-53|CP-10, CSCv7|10.2

Plugin: MySQLDB

Control ID: e5334ee253971f16e310847960fe0c70a4df2408a7d4ded073de4354d9547b85