Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Backup of critical data for the HMC and its components must be documented and tracked
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-256856 | HMCP0130 | SV-256856r890914_rule | Medium |
| Description |
|---|
| If procedures for performing backup and recovery of critical data for the HMC is not in place, system recoverability may be jeopardized and overall security compromised. |
| STIG | Date |
|---|---|
| IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide | 2023-03-20 |
Details
| Check Text ( C-60531r890912_chk ) |
|---|
| Review the documentation for backup of critical data for a HMC with the System Administrator. Review documentation for completeness and accuracy. If no documentation exists, this is a FINDING. |
| Fix Text (F-60474r890913_fix) |
|---|
| Verify that procedures for backup of the critical data for the HMCs are properly documented. If not, create Backup Procedures documentation. CPC data should be backed-up when configuration or CPC- licensed internal code changes have been made or as a routine preventive maintenance procedure. |