O112-C2-012300 - Database backup procedures must be defined, documented, and implemented.

Information

Information system backup is a critical step in maintaining data assurance and availability.

User-level information is data generated by information system and/or application users. In order to assure availability of this data in the event of a system failure, DoD organizations are required to ensure user-generated data is backed up at a defined frequency. This includes data stored on file systems, within databases or within any other storage media.

Applications performing backups must be capable of backing up user-level information per the DoD-defined frequency.

Database backups provide the required means to restore databases after compromise or loss. Backups help reduce the vulnerability to unauthorized access or hardware loss.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Develop, document, and implement database backup procedures.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11-2g_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-238455r961863_rule, STIG-ID|O112-C2-012300, STIG-Legacy|SV-66463, STIG-Legacy|V-52247, Vuln-ID|V-238455

Plugin: OracleDB

Control ID: 3c8a5ce1d8301685c5d775917135bce4a76eb936660536dadf4854ba9aa5d1ec