UCF STIG Viewer Logo

Oracle must back up user-level information per a defined frequency.


Overview

Finding ID Version Rule ID IA Controls Severity
V-61693 O121-C2-012200 SV-76183r2_rule Medium
Description
Information system backup is a critical step in maintaining data assurance and availability. User-level information is data generated by information system and/or application users. In order to assure availability of this data in the event of a system failure, DoD organizations are required to ensure user-generated data is backed up at a defined frequency. This includes data stored on file systems, within databases or within any other storage media. Applications performing backups must be capable of backing up user-level information per the DoD-defined frequency. Databases that do not backup information regularly risk the loss of that information in the event of a system failure. Most databases contain functionality to allow regular backups; it is important that this functionality is enabled and configured correctly to prevent data loss.
STIG Date
Oracle Database 12c Security Technical Implementation Guide 2019-12-11

Details

Check Text ( C-62571r2_chk )
Review DBMS settings and site documentation to determine whether Oracle is configured to back up user-level data according to a defined frequency.

If it is not, this is a finding.

(The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For on-going jobs, this view displays progress and status.)
Fix Text (F-67609r1_fix)
Configure the Oracle DBMS to back up user-level data on a defined frequency.