Site staff does not ensure backup media is available and up to date prior to software modification.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-7985	DSN17.03	SV-8471r1_rule	COBR-1 CODB-1 CODB-2 CODB-3 ECSC-1	Medium

Description
Requirement: The IAO will ensure that site staff will ensure back-up media is available and up-to-date prior to software modification that could cause a significant disruption to service if the new software is corrupted. Back up media will be available to site personnel prior to any software upgrades or major provisioning changes. This will enable site personnel to recover the DSN system in case of system failure under newly introduced software or major changes.

Description

Requirement: The IAO will ensure that site staff will ensure back-up media is available and up-to-date prior to software modification that could cause a significant disruption to service if the new software is corrupted. Back up media will be available to site personnel prior to any software upgrades or major provisioning changes. This will enable site personnel to recover the DSN system in case of system failure under newly introduced software or major changes.

STIG	Date
Defense Switched Network (DSN) STIG	2015-06-30

Details

Check Text ( C-7366r1_chk )
Interview the IAO or SA and confirm compliance through discussion, review of site policy, diagrams, documentation, DAA approvals, etc as applicable.

Fix Text (F-8038r1_fix)
f technically feasible, configure the system to automatically perform weekly backups and record them locally on the component and on removable media. Alternately insure that weekly backups are performed manually. The SA must also ensure the removable media is removed and stored locally by site personnel. Storing an additional copy off site is also highly recommended. Perform a system backup just prior to any system change, maintenance, or upgrade. If this is not feasible insure that the most recent weekly backup is readily available for use.

Fix Text (F-8038r1_fix)

f technically feasible, configure the system to automatically perform weekly backups and record them locally on the component and on removable media. Alternately insure that weekly backups are performed manually. The SA must also ensure the removable media is removed and stored locally by site personnel. Storing an additional copy off site is also highly recommended. Perform a system backup just prior to any system change, maintenance, or upgrade. If this is not feasible insure that the most recent weekly backup is readily available for use.