Detections
Analytics

1.013 - System information backups will be created, updated, and protected.

Information

Recovery of a damaged or compromised system in a timely basis is difficult without a system information backup. A system backup will usually include sensitive information such as user accounts that could be used in an attack. As a valuable system resource, the system backup should be protected and stored in a physically secure location.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Implement backup procedures that comply with the following requirements:

-Maintain emergency system recovery data.
-The emergency system recovery data is protected from destruction and stored in a locked storage container.
-The emergency system recovery data is updated following the last system modification.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2008_R2_MS_V1R33_STIG.zip

Item Details

References: CAT|III, CCI|CCI-000366, Rule-ID|SV-32245r1_rule, STIG-ID|1.013, Vuln-ID|V-1076

Plugin: Windows

Control ID: 4c6cbb8f885ee966fd5c0afacd3f3142c16e0e543eae45433da6baf7e203d2ff