CSCv6|10.1

Title

Ensure that each system is automatically backed up on at least a weekly basis, and more often for systems storing sensitive information.

Description

Ensure that each system is automatically backed up on at least a weekly basis, and more often for systems storing sensitive information. To help ensure the ability to rapidly restore a system from backup, the operating system, application software, and data on a machine should each be included in the overall backup procedure. These three components of a system do not have to be included in the same backup file or use the same backup software. There should be multiple backups over time, so that in the event of malware infection, restoration can be from a version that is believed to predate the original infection. All backup policies should be compliant with any regulatory or official requirements.

Reference Item Details

Category: Data Recovery Capability

Family: System

Audit Items