DG0020-ORACLE11 - Backup and recovery procedures should be developed, documented, implemented and periodically tested.

Information

Problems with backup procedures or backup media may not be discovered until after a recovery is needed. Testing and verification of procedures provides the opportunity to discover oversights, conflicts, or other issues in the backup procedures or use of media designed to be used.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Design, document and implement backup testing and recovery verification procedures for the DBMS host and all individual database instances and either include or note the name, location, version and current revision date of any external documentation in the System Security Plan.

Include any requirements for documenting database backup and recovery testing and verification activities in the procedures.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip

Item Details

References: CAT|II, Rule-ID|SV-24608r1_rule, STIG-ID|DG0020-ORACLE11, Vuln-ID|V-15129

Plugin: Windows

Control ID: 28acd6a3de5c0b0a366924fff25fb939405ac1f1f6e967d3025f6218599cce4e