Detections
Analytics

800-53|CP-9a.

Title

INFORMATION SYSTEM BACKUP

Description

Conducts backups of user-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives];

Reference Item Details

Category: CONTINGENCY PLANNING

Family: CONTINGENCY PLANNING

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
2.5 Set 'Do not permanently delete items until the database has been backed up' to 'True'WindowsCIS Microsoft Exchange Server 2016 Mailbox v1.0.0
2.5 Set 'Do not permanently delete items until the database has been backed up' to 'True'WindowsCIS Microsoft Exchange Server 2013 Mailbox v1.1.0
2.14 Set 'Retain deleted items for the specified number of days' to '14'WindowsCIS Microsoft Exchange Server 2013 Mailbox v1.1.0
2.14 Set 'Retain deleted items for the specified number of days' to '14'WindowsCIS Microsoft Exchange Server 2016 Mailbox v1.0.0
SQL2-00-017700 - SQL Server user-level information must be backed up based on a defined frequency.MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-017800 - SQL Server backup procedures must be defined, documented, and implemented.MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-017900 - SQL Server recovery procedures that are documented must be implemented and periodically tested.MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-018100 - SQL Server backup and restoration files must be protected from unauthorized access.MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20