NIST 800-171 v2
110 security requirements available
3.8.9Derived Requirement
Media Protection
Security Requirement
Protect the confidentiality of backup CUI at storage locations.
Discussion
Organizations can employ cryptographic mechanisms or alternative physical controls to protect the confidentiality of backup information at designated storage locations. Backed-up information containing CUI may include system-level information and user-level information. System-level information includes system-state information, operating system software, application software, and licenses. User-level information includes information other than system-level information.
- Framework
- NIST SP 800-171 Rev 2
- Family
- Media Protection
- Requirement Type
- derived
Related Frameworks
13 paths across 2 frameworks
Related Frameworks
NIST 800-531 mapping
CP-9
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI12 mappings
CCI-000534
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000535
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000536
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000537
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000538
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000539
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000540
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004020
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004021
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004022
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004023
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004024
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
Related STIGs
18 STIGs reach this control through 26 CCIs via 800-53 control CP-9. Expand a row to see the responsible NICE and O*NET roles.
Operating System — Server
2 STIGs
Operating System — Server
2 STIGsNetApp ONTAP DSC 9.x Security Technical Implementation Guide
22024-08-221 of 29 findings match
M1
NetApp ONTAP DSC 9.x Security Technical Implementation Guide
V2R32025-12-081 of 29 findings match
M1
Network Device
10 STIGs
Network Device
10 STIGsArista MLS EOS 4.X NDM Security Technical Implementation Guide
V2R22025-02-201 of 21 findings match
M1
Cisco ACI NDM Security Technical Implementation Guide
12025-06-131 of 26 findings match
M1
Cisco ACI NDM Security Technical Implementation Guide
V1R22025-12-111 of 26 findings match
M1
Cisco ASA NDM Security Technical Implementation Guide
22025-05-191 of 47 findings match
M1
Cisco ASA NDM Security Technical Implementation Guide
V2R42025-12-081 of 47 findings match
M1
Juniper Router NDM Security Technical Implementation Guide
V3R22024-12-051 of 49 findings match
M1
Network Device Management Security Requirements Guide
V5R32025-02-111 of 104 findings match
M1
Network Device Management Security Requirements Guide
V5R42025-09-101 of 105 findings match
M1
Show 2 more STIGs in this category →Hide additional STIGs
Riverbed NetIM NDM Security Technical Implementation Guide
V1R12025-09-291 of 15 findings match
M1
Trend Micro TippingPoint NDM Security Technical Implementation Guide
V2R32025-03-101 of 30 findings match
M1
Web / Application Server
2 STIGs
Web / Application Server
2 STIGsApplication Security and Development Security Technical Implementation Guide
62025-02-123 of 286 findings match
M3
Application Security and Development Security Technical Implementation Guide
V6R42025-09-093 of 286 findings match
M3
Virtualization / Container
2 STIGs
Virtualization / Container
2 STIGsVMware NSX 4.x Manager NDM Security Technical Implementation Guide
V1R22024-12-131 of 28 findings match
M1
VMware NSX-T Manager NDM Security Technical Implementation Guide
V1R32023-06-221 of 23 findings match
M1
Endpoint Security Management
2 STIGs
Endpoint Security Management
2 STIGsHYCU Protege Security Technical Implementation Guide
12024-10-291 of 55 findings match
M1
HYCU Protege Security Technical Implementation Guide
V1R22026-03-041 of 55 findings match
M1