Database backup procedures should be defined, documented and implemented.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15126	DG0013-ORACLE10	SV-24600r1_rule	CODB-1 CODB-2 CODB-3	Medium

Description
Database backups provide the required means to restore databases after compromise or loss. Backups help reduce the vulnerability to unauthorized access or hardware loss.

STIG	Date
Oracle Database 10g Installation STIG	2014-04-02

Details

Check Text ( C-2949r1_chk )
Review the database backup procedures and implementation evidence. Evidence of implementation includes records of backup events and physical review of backup media. Evidence should match the backup plan as recorded in the System Security Plan. If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding. If backups do not include a redundant secondary system maintained at a separate physical site that can be activated without interruption or loss of data if the primary system fails, this is a Finding.

Check Text ( C-2949r1_chk )

Review the database backup procedures and implementation evidence.

Evidence of implementation includes records of backup events and physical review of backup media.

Evidence should match the backup plan as recorded in the System Security Plan.

If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding.

If backups do not include a redundant secondary system maintained at a separate physical site that can be activated without interruption or loss of data if the primary system fails, this is a Finding.

Fix Text (F-3798r1_fix)
Develop, document and implement database backup procedures. Include a secondary server installed at a separate location (IAW COOP guidelines) that can be brought online to prevent any disruption to availability or loss of data.