Database backup procedures should be defined, documented and implemented.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15126	DG0013-SQLServer9	SV-30771r1_rule	CODB-1 CODB-2 CODB-3	Medium

Description
Database backups provide the required means to restore databases after compromise or loss. Backups help reduce the vulnerability to unauthorized access or hardware loss.

STIG	Date
Microsoft SQL Server 2005 Instance Security Technical Implementation Guide	2015-06-16

Details

Check Text ( C-31188r1_chk )
Review the database backup procedures and implementation evidence. Evidence of implementation includes records of backup events and physical review of backup media. Evidence should match the backup plan as recorded in the System Security Plan. If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding. If backups are not performed weekly or more often, this is a Finding.

Check Text ( C-31188r1_chk )

Review the database backup procedures and implementation evidence.

Evidence of implementation includes records of backup events and physical review of backup media.

Evidence should match the backup plan as recorded in the System Security Plan.

If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding.

If backups are not performed weekly or more often, this is a Finding.

Fix Text (F-27682r1_fix)
Develop, document and implement database backup procedures. Include weekly backup procedures and offline backup data storage.