The MDM server must conduct backups of system-level information contained in the information system per organization defined frequency to conduct backups that are consistent with recovery time and recovery point objectives.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36036	SRG-APP-146-MDM-032-SRV	SV-47425r1_rule		Medium

Description
MDM server backup is a critical step in maintaining data assurance and availability. Without available back up data to restore a system in the event of a system failure, the system may be rendered useless. If the MDM server fails and there is no backup of the MDM server information, a denial of service condition is possible for all who utilize this critical network component.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44275r1_chk )
Review the MDM server configuration, server configuration, and organizational policy to determine backup strategy. Backups must be consistent with recovery time and recovery point objectives. If a system-level backup strategy is not in place, this is a finding.

Fix Text (F-40566r1_fix)
Implement system level backup strategy.