Oracle must back up user-level information per a defined frequency.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-61693	O121-C2-012200	SV-76183r2_rule		Medium

Description
Information system backup is a critical step in maintaining data assurance and availability. User-level information is data generated by information system and/or application users. In order to assure availability of this data in the event of a system failure, DoD organizations are required to ensure user-generated data is backed up at a defined frequency. This includes data stored on file systems, within databases or within any other storage media. Applications performing backups must be capable of backing up user-level information per the DoD-defined frequency. Databases that do not backup information regularly risk the loss of that information in the event of a system failure. Most databases contain functionality to allow regular backups; it is important that this functionality is enabled and configured correctly to prevent data loss.

Description

Information system backup is a critical step in maintaining data assurance and availability. User-level information is data generated by information system and/or application users. In order to assure availability of this data in the event of a system failure, DoD organizations are required to ensure user-generated data is backed up at a defined frequency. This includes data stored on file systems, within databases or within any other storage media. Applications performing backups must be capable of backing up user-level information per the DoD-defined frequency. Databases that do not backup information regularly risk the loss of that information in the event of a system failure. Most databases contain functionality to allow regular backups; it is important that this functionality is enabled and configured correctly to prevent data loss.

STIG	Date
Oracle Database 12c Security Technical Implementation Guide	2017-04-05

Details

Check Text ( C-62571r2_chk )
Review DBMS settings and site documentation to determine whether Oracle is configured to back up user-level data according to a defined frequency. If it is not, this is a finding. (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For on-going jobs, this view displays progress and status.)

Fix Text (F-67609r1_fix)
Configure the Oracle DBMS to back up user-level data on a defined frequency.