Detections
Analytics
1.013 - System information backups are not created, updated, and protected according to DISA requirements.
Information
Recovery of a damaged or compromised system in a timely basis is difficult without a system information backup. A system backup will usually include sensitive information such as user accounts that could be used in an attack. As a valuable system resource, the system backup should be protected and stored in a physically secure location.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Implement data backup procedures that comply with DoD requirements.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2008_DC_V6R47_STIG.zip
Item Details
Audit Name: DISA Windows Server 2008 DC STIG v6r47
References: CAT|III, CCI|CCI-000366, Rule-ID|SV-29627r1_rule, STIG-ID|1.013, Vuln-ID|V-1076
Plugin: Windows
Control ID: eb7777c08b541946a55dd6bacf0705a0795b85768807bd80a19069e8b8e5219c