Data backup is performed daily, and recovery media are stored off-site at a location that affords protection of the data in accordance with its mission assurance category and confidentiality level.
|MAC / CONF||Impact||Subject Area|
|Classified or sensitive data is at risk of loss or corruption if not backed up on media that and stored at an off-site location, should an incident occur at the primary site, such as fire, water, natural disaster, and tampering.|
| This guidance is written for System Administrators with backup privileges: |
1. Perform data backups on a daily basis at times specified by local operations policy.
2. Ensure that site(s) is/are designated for storage of Backup/Recovery media at a location that affords protection of the data in accordance with its mission assurance category and confidentiality level.
3. Backup media shall be labeled with the appropriate information, including system identifier, classification or sensitivity labeling, and a Date/Time stamp.
4. Ensure that data backups are logged and verified by the appropriate administrative personnel in accordance with system security policy.