UCF STIG Viewer Logo

Database backup procedures should be defined, documented and implemented.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15126 DG0013-ORACLE10 SV-24600r1_rule CODB-1 CODB-2 CODB-3 Medium
Description
Database backups provide the required means to restore databases after compromise or loss. Backups help reduce the vulnerability to unauthorized access or hardware loss.
STIG Date
Oracle 10 Database Installation STIG 2014-01-14

Details

Check Text ( C-2949r1_chk )
Review the database backup procedures and implementation evidence.

Evidence of implementation includes records of backup events and physical review of backup media.

Evidence should match the backup plan as recorded in the System Security Plan.

If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding.

If backups do not include a redundant secondary system maintained at a separate physical site that can be activated without interruption or loss of data if the primary system fails, this is a Finding.
Fix Text (F-3798r1_fix)
Develop, document and implement database backup procedures.

Include a secondary server installed at a separate location (IAW COOP guidelines) that can be brought online to prevent any disruption to availability or loss of data.