Threat

Classified or sensitive data is at risk of loss or corruption if not backed up on media that and stored at an off-site location, should an incident occur at the primary site, such as fire, water, natural disaster, and tampering.

Implementation Guidance

This guidance is written for System Administrators with backup privileges: 1. Perform data backups on a daily basis at times specified by local operations policy. 2. Ensure that site(s) is/are designated for storage of Backup/Recovery media at a location that affords protection of the data in accordance with its mission assurance category and confidentiality level. 3. Backup media shall be labeled with the appropriate information, including system identifier, classification or sensitivity labeling, and a Date/Time stamp. 4. Ensure that data backups are logged and verified by the appropriate administrative personnel in accordance with system security policy.

Resources

- DoD Directive 3020.26, Defense Continuity Program, 08 September 2004

Framework

DoD Instruction 8500.2

Subject Area

Continuity

Impact Code

Medium

MAC Levels

MAC 2