Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-24844 | HMCP0130 | SV-30533r1_rule | COTR-1 | Medium |
Description |
---|
If procedures for performing backup and recovery of critical data for the HMC is not in place, system recoverability may be jeopardized and overall security compromised. |
STIG | Date |
---|---|
IBM HARDWARE MANAGEMENT CONSOLE (HMC) STIG Policies | 2010-11-09 |
Check Text ( C-30871r1_chk ) |
---|
Review the documentation for backup of critical data for a HMC with the System Administrator. Review documentation for completeness and accuracy. If no documentation exists, this is a FINDING. |
Fix Text (F-27491r1_fix) |
---|
Verify that procedures for backup of the critical data for the HMCs are properly documented. If not, create Backup Procedures documentation. CPC data should be backed-up when configuration or CPC- licensed internal code changes have been made or as a routine preventive maintenance procedure. |